0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/22)

[  719.277900][   T26] audit: type=1804 audit(1582736968.105:3890): pid=23247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir599649466/syzkaller.c7xmnM/498/bus" dev="sda1" ino=16534 res=1
17:09:28 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x06\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:09:28 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = dup(r0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

17:09:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024025000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
dup3(r4, r1, 0x0)

17:09:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0))
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
close(r0)
r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000040)=""/82, 0x52}], 0x1)
r6 = dup3(r5, r3, 0x80000)
ioctl$RTC_WIE_ON(r6, 0x700f)

[  719.660610][T23269] __nla_validate_parse: 2 callbacks suppressed
[  719.660623][T23269] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  719.852999][T23282] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:29 executing program 3:
add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe)
madvise(&(0x7f00004a6000/0xe000)=nil, 0xe000, 0xc)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000c1fc9400017c7fa7adb18e0c37b285dfde222b981ec75432ff53997f22c02edc1f65b0e5f83bc10f4bff08ac4eb505a9d8a91fda0986d1cd0bc83073c8e6aac034ffc094613fdb43e877af7de5a8a134e5304e4d3989567d2f61e776c3383180ed8d83eb838769a7870dfe404909b1eb5df465166f5afdd79b48f48e7a67b9ce7fb726dbc144ab7fe76e5dc5c18b893d1df6b91a42e6a5cdb6f3f59c1596846e9a0d", @ANYRES16=r4, @ANYBLOB="843403d018a0bea2bd27dd109a3dd731b049be1cb9cdb438d9fc8d9571b05f345a59ea92c7751fe92549cd97a796019dade07850ffa50e744ef5d0bb617a6b8b013c57cc6ff0ead914403915b0739506d10c9855d8"], 0x3}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setpgid(r0, r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

17:09:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0xa0503, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

17:09:29 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = dup(r0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
pipe(&(0x7f0000000140))
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

17:09:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024035000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:29 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000100)="12cb96df", 0x4)
write$FUSE_POLL(r1, &(0x7f00000001c0)={0x18}, 0x18)
bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0701"], 0x2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

[  720.284753][T23296] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:29 executing program 5:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24020, &(0x7f0000000040)={[{@nolazytime='nolazytime'}]})

17:09:29 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
r0 = epoll_create1(0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
socket$packet(0x11, 0x0, 0x300)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '}'}}, 0x22)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20002004})
stat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x501181, 0x0)

17:09:29 executing program 2:
fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00')
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @vsock={0x28, 0x0, 0x2711, @host}, @nl=@unspec, @in={0x2, 0x4e20}, 0x4e4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_to_bond\x00', 0xf2b, 0x2, 0x7})
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000080)={0x800})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/vlan/config\x00')
preadv(r1, &(0x7f00000017c0), 0x3a8, 0x300)

[  720.412169][T23304] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024050000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  720.785920][T23326] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  720.828346][T23311] EXT4-fs (sda1): re-mounted. Opts: nolazytime,
[  720.899267][T23327] EXT4-fs (sda1): re-mounted. Opts: nolazytime,
[  720.967047][T23332] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:29 executing program 5:
syz_open_dev$ttys(0xc, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x106}}], 0x400000000000107, 0x0)
shutdown(0xffffffffffffffff, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

17:09:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002405a000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:29 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = dup(r0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
pipe(&(0x7f0000000140))
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

17:09:30 executing program 3:
add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe)
madvise(&(0x7f00004a6000/0xe000)=nil, 0xe000, 0xc)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setpgid(r0, r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

17:09:30 executing program 0:
creat(&(0x7f0000000500)='./bus\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000001)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000551000/0x3000)=nil, 0x3000)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000100)=""/8, 0x8)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44)
fdatasync(r0)

17:09:30 executing program 1:
socket(0x10, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@loopback}, 0x14)
r1 = dup(0xffffffffffffffff)
ioctl$TIOCSIG(r1, 0x40045436, 0x25)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff})
ioctl$KDSKBLED(r3, 0x4b65, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x84, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4044014)

[  721.314954][T23343] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:30 executing program 5:
epoll_create1(0x0)
pipe(&(0x7f0000000140))
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

17:09:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0))
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)

[  721.484686][T23354] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024045010200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12"]})

17:09:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = dup(r0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
read$alg(r1, &(0x7f0000000400)=""/123, 0x7b)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
pipe(0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

[  722.078014][T23375] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  722.243260][T23382] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024052300200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:31 executing program 5:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x60000, 0x0)

17:09:31 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)

17:09:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8001)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
sendfile(r1, r2, 0x0, 0xffffffff)
sendmsg$FOU_CMD_GET(r2, 0x0, 0x0)
getpgid(0x0)
socket$nl_audit(0x10, 0x3, 0x9)

[  722.837062][   T26] audit: type=1804 audit(1582736971.665:3891): pid=23400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir664155801/syzkaller.qDXO5T/511/bus" dev="sda1" ino=16533 res=1
17:09:31 executing program 3:
socket$inet6(0xa, 0x0, 0x0)
r0 = epoll_create1(0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
socket$packet(0x11, 0x0, 0x300)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '}'}}, 0x22)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x501181, 0x0)

17:09:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a020000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0)

17:09:31 executing program 2:
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)

17:09:32 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000011c0)={0x14, r1, 0x525}, 0x14}}, 0x0)

17:09:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a040000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  723.467306][T23423] selinux_netlink_send: 20 callbacks suppressed
[  723.467330][T23423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=23423 comm=syz-executor.0
17:09:32 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x25}]}, 0x40}}, 0x0)

[  723.507097][T23425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=23425 comm=syz-executor.0
17:09:32 executing program 0:
r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000380))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0)
pread64(r3, 0x0, 0x0, 0x0)

[  723.659161][   T26] audit: type=1804 audit(1582736972.465:3892): pid=23406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir664155801/syzkaller.qDXO5T/511/bus" dev="sda1" ino=16533 res=1
17:09:32 executing program 5:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20}, 0x20)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000090020000c80007000000000000000000c800000060010000f8010000f8010000f8010000f8010000f801000004000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000a07600000000000000000000000000000000000000000000000000a000c8000000010000000000000000000000000000000000300061646472747970650000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac1414bb000000000000000067726430000000000000000000000000000000000000000000000000000000ca00000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028005345540000000000000000000000000000000000000000000000000000010000030000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000005000000000000000000000000000000feffffff"], 0x1)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

17:09:32 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f7284b2b5d2f2fba401a80af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a74a75d00008489ef3932c2c66566a55fd4caa85307000065090021b173c73f15984fdd5bd24e99cd40e6b02b7dcd2809000000000000005b8c8900000000000000001e000000000076c8a25a49232aaf59c0ac967980100b6c62b21b25bbe49e99cdea2faee3ac9bb13b505a6aa021f927f688cffd397d85ea504f11e89478f72a7b0e42371f6575832b76f7a2bd0e84da311488592e96549d36c73298523593b74e571394064bc630a664ea9dd5f0998fc02903937e7c3f6306c60c2c09a08fcdce73", 0xf0}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x2c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

17:09:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a080000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  723.842080][   T26] audit: type=1804 audit(1582736972.465:3893): pid=23428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir664155801/syzkaller.qDXO5T/511/bus" dev="sda1" ino=16533 res=1
17:09:32 executing program 0:
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)

17:09:32 executing program 3:
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[  723.961544][T23445] x_tables: duplicate underflow at hook 2
17:09:32 executing program 3:
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37)
link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00')
rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000180)='./file2\x00')

17:09:33 executing program 0:
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x2c4)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='ns/pid_for_children\x00', 0x0)

17:09:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400ab00000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:33 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000000114000400fe8000000000000000000000000000bb0c000200050001002f000000240002000c000200050001002f00040014000100080001000000000008000200e000000108000700000000003204f5c38635772ab63af533c79846c8965728fcbcd0a384dbea38ea2d4e6750d6a5557e1a801a936944fa59d9f0ebfcb5613d7b6e60e977e850382924133fbcfd97ca8e1f9362f0c6c039378f81a81061e5e3"], 0x7c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x1c, 0x2, 0x1, 0x80b, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

17:09:33 executing program 0:
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/73, 0x3d}, {0x0}], 0x4d}, 0x0)
recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510)
shutdown(r0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
shutdown(r1, 0x0)

17:09:33 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x25}]}, 0x40}}, 0x0)

17:09:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a020200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/248, 0xf8}, {0x0}, {0x0}, {0x0}], 0x5)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0079d)
shutdown(r0, 0x0)
shutdown(r1, 0x0)

[  724.872399][T23491] __nla_validate_parse: 10 callbacks suppressed
[  724.872412][T23491] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  725.002709][T23497] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:35 executing program 1:

17:09:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x42)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005ae)
shutdown(r0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
shutdown(r1, 0x0)

17:09:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}], 0x2}, 0x0)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xff94, 0x0, 0x0, 0x800e00526)
shutdown(r1, 0x0)
shutdown(r2, 0x0)

17:09:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/254, 0xfe}], 0x1)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/73, 0x3d}, {0x0}], 0x4d}, 0x0)
recvfrom$inet(r4, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510)
shutdown(r3, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r5, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
shutdown(r4, 0x0)
shutdown(r2, 0x0)

17:09:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a030200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:35 executing program 3:
semget(0x0, 0x7, 0x390)

17:09:35 executing program 3:

[  726.943633][T23515] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:35 executing program 2:

17:09:35 executing program 1:

[  727.032037][T23523] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:36 executing program 5:

17:09:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a040200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/164, 0xa4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507)
shutdown(r0, 0x0)
r2 = dup(r1)
shutdown(r2, 0x0)

17:09:36 executing program 2:

17:09:36 executing program 0:

17:09:36 executing program 1:

17:09:36 executing program 5:

[  727.477811][T23544] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:36 executing program 1:

17:09:36 executing program 2:

17:09:36 executing program 0:

17:09:36 executing program 3:

[  727.626974][T23550] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:36 executing program 1:

17:09:36 executing program 5:

17:09:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a050200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:36 executing program 2:

17:09:36 executing program 0:

17:09:36 executing program 3:

17:09:36 executing program 1:

17:09:36 executing program 2:

[  728.063687][T23567] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:37 executing program 0:

17:09:37 executing program 5:

17:09:37 executing program 3:

17:09:37 executing program 1:

[  728.300791][T23575] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:37 executing program 2:

17:09:37 executing program 0:

17:09:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a060200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:37 executing program 3:

17:09:37 executing program 5:

17:09:37 executing program 2:

17:09:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000180)=0x2, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$selinux_validatetrans(r1, &(0x7f00000000c0)={'system_u:object_r:ssh_keygen_exec_t:s0', 0x20, 'system_u:object_r:watchdog_device_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x88)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040))

17:09:37 executing program 0:

[  728.718620][T23591] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:37 executing program 3:

17:09:37 executing program 5:

[  728.872819][T23597] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:37 executing program 2:

17:09:37 executing program 0:

17:09:37 executing program 1:

17:09:37 executing program 3:

17:09:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a070200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:37 executing program 5:

17:09:38 executing program 2:

17:09:38 executing program 0:

17:09:38 executing program 1:

17:09:38 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f15b9409b0d1b849ac00200a57802", 0x15, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a86, 0x0, 0x0, 0x4b6ae4f95a5de35b)

17:09:38 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x100, 0xcc)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))

17:09:38 executing program 2:

17:09:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a090200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:38 executing program 1:

17:09:38 executing program 0:

17:09:38 executing program 5:

17:09:38 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d2f09ff060000000000001c00"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000029008b8501efe5da7000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x24}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

17:09:38 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010300000100000000000000800005000100070000001c0007800c00028008000140ac1414000c00018008000140a51e00010900020073797a32"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  729.891324][T23640] __nla_validate_parse: 4 callbacks suppressed
[  729.891338][T23640] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:38 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000020c0)=ANY=[@ANYBLOB="304c00002c00050600"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x4c30}}, 0x4000)
r2 = socket(0x1000000010, 0x80003, 0x0)
sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0)

17:09:38 executing program 1:
r0 = socket(0x11, 0x2, 0x0)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d2f09ff060000000000001c00"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2400000029008b8501efe5da7000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x24}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

17:09:38 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x9b)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="84", 0x1, 0x200400d4, 0x0, 0x0)

[  730.082494][T23646] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:39 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x15, 0x0, "300b648d8f65a58f71ab3656ab6b5a0a6ac88cb0cfe5f70846c6a14bd7e9fbcae83f357d81d3aa37a09143458175df6d267586a69d334f62a96cd14d41c35ab916590d91497299000f23a06e7b52bae0"}, 0xd8)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

17:09:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0a0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:39 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x6)
dup3(r1, r0, 0x0)

17:09:39 executing program 1:
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7)
dup3(0xffffffffffffffff, r0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:09:39 executing program 0:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000003000000000000000000008d30616fcb37be5381864dd584209f8f381851038ffed5de38739538a9f71673ecd64140807da7c47303f852259e368c4d88b628b4fd2acfe534c8bd5b0d462754d5"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144}, 0x48)

[  730.432057][T23667] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:39 executing program 2:
socket$vsock_stream(0x28, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[  730.594205][T23678] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:39 executing program 1:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="5669033df23e5fb32245173a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

17:09:39 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b40)=0x2, 0x1)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000005a00))
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f00000003c0)=""/230, 0xe6)

17:09:39 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

17:09:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0e0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:39 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)

[  731.093086][T23698] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)

17:09:40 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[  731.212872][T23703] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:40 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="8e0ef0679b72fa4509afe21688d01aeeb07f27de1b4b29f69b334a", 0x1b}], 0x1)

17:09:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0f0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:40 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

17:09:40 executing program 1:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0)
mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="5669033df23e5fb32245173a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

17:09:40 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x0, 0x110001)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xa198)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="000000000000000004000d000000050035000300000005003500010000000500370001000000"], 0x3}, 0x1, 0x0, 0x0, 0x8c}, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e1eba000000012e0b3836005404b0301a4ce8b7679500800000000000000101013c5811039e15775027ec8f66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2a95400"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @xdp, @l2tp={0x2, 0x0, @loopback}, @in={0x2, 0x0, @local}, 0x3, 0x0, 0x0, 0x0, 0x7ea, 0x0, 0xf7, 0x0, 0xfff})
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ff)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x20480, 0xb)

17:09:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040), 0x4)

17:09:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0)

[  731.679838][T23723] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  731.812345][T23733] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:40 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

17:09:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a480200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:40 executing program 3:
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x5f, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  732.155550][T23753] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:41 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x3b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = getpid()
tkill(r1, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r2, 0x0, 0xedc0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
r3 = socket(0x0, 0x2, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0)
syz_open_procfs(0x0, 0x0)

[  732.278283][T23758] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a4c0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)

17:09:41 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)

17:09:41 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r0, 0x8204)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r1, 0x0, 0x8080fffffffe)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x40001)
creat(0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)

17:09:41 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400)
write$rfkill(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(r0, 0x1)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = open(0x0, 0x8001141042, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0)
r4 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0)
write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8)
lseek(r4, 0x0, 0x4)
ftruncate(r3, 0x0)
sendfile(r1, r3, 0x0, 0x8482)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

17:09:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86)
sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

17:09:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a500200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:43 executing program 3:
clone(0x802102901ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000480200000000000000000000d8000000d800000000000000b0010000b0010000b0010000b0010000b001000003000000000000000000000000000000ac1414aa00000000000000007866726d30000000000000000000000062d462975b1e31be6400000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000007000d800000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d800000000000000000000000000007d01f38500000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000008000000000002800000000000000000000000000000000000100000002000000000000000004feffffff"], 0x1)
r1 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')

17:09:43 executing program 5:
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
preadv(r0, &(0x7f00000017c0), 0x375, 0x0)

17:09:43 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x10a0}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

17:09:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a600200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:43 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/90, 0x5a}], 0x1, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50)

[  735.010600][T23808] No such timeout policy "syz1"
17:09:43 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)

[  735.099361][T23814] __nla_validate_parse: 4 callbacks suppressed
[  735.099372][T23814] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:44 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86)
sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

17:09:44 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})

17:09:44 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ppoll(&(0x7f00000024c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

[  735.285518][T23825] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:44 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r4, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38c6417742e79943d5d052fcb6b7eedb310194e73efeae2ebe52d9000000009922df930aaa9f657a6705dd1306344fca35147769094bf67464a3b18d91af811f70ca20feac658b0d107fe0faca0491f154dc3745fd46405f9f8963d152783fd58dcac7392590d50300a3bbcc09543082eee252a343d4f008aaba4dd21af63886e0119cb127e31a978263eebc91d6fddb613c964fec09b006b2a9", 0x35ac}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccec280f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000000)

17:09:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a680200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  735.639822][T23844] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  735.701918][T23846] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:47 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:47 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400)
write$rfkill(r0, &(0x7f0000000140)={0x9, 0x4}, 0x8)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x1)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(r0, 0x1)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540))
inotify_init1(0x80000)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0)
r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0)
write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8)
lseek(r6, 0x0, 0x4)
ftruncate(r4, 0x2007fff)
sendfile(r1, r4, 0x0, 0x8482)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000))
memfd_create(&(0x7f0000000300)='\x00', 0xa)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x20)

17:09:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd000000fb007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000100000000000000000000000000000000ee00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000010020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0)

17:09:47 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x8}}, 0x50)

17:09:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a6c0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:47 executing program 3:

[  738.304225][T23862] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:47 executing program 1:

[  738.351300][T23864] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  738.383686][T23865] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:47 executing program 3:

17:09:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a740200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:47 executing program 1:

17:09:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)

[  738.757403][T23875] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  738.886472][T23878] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8)
lseek(r2, 0x0, 0x4)

17:09:50 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a7a0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:50 executing program 3:

17:09:50 executing program 1:

17:09:50 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400)
write$rfkill(r0, &(0x7f0000000140)={0x9, 0x4}, 0x8)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x1)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(r0, 0x1)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540))
inotify_init1(0x80000)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0)
r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0)
write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8)
lseek(r6, 0x0, 0x4)
ftruncate(r4, 0x2007fff)
sendfile(r1, r4, 0x0, 0x8482)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000))
memfd_create(&(0x7f0000000300)='\x00', 0xa)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x20)

17:09:50 executing program 5:

[  741.330177][T23897] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:50 executing program 5:

17:09:50 executing program 1:

17:09:50 executing program 3:

[  741.471872][T23907] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:50 executing program 5:

17:09:50 executing program 1:

17:09:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400aa20200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  741.875204][T23916] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
[  741.967899][T23920] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:53 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:53 executing program 3:

17:09:53 executing program 5:

17:09:53 executing program 1:

17:09:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400ab00200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:53 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400)
write$rfkill(r0, &(0x7f0000000140)={0x9, 0x4}, 0x8)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x1)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(r0, 0x1)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540))
inotify_init1(0x80000)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0)
r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0)
write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8)
lseek(r6, 0x0, 0x4)
ftruncate(r4, 0x2007fff)
sendfile(r1, r4, 0x0, 0x8482)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000))
memfd_create(&(0x7f0000000300)='\x00', 0xa)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x20)

[  744.416709][T23926] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:53 executing program 1:

17:09:53 executing program 3:

17:09:53 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
sendfile(r0, r1, &(0x7f0000000240)=0x9b02, 0x4000000000dc)
openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)

[  744.541177][T23935] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'.
17:09:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000300053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:53 executing program 1:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0)

17:09:53 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a280930206000035000001020b00000a0004003500280014000000190005407fffffff6022de1338d54400009b84136ef75afb83de4411001600c43ab82200"/85, 0x55}], 0x1}, 0x0)

[  744.985154][T23951] validate_nla: 6 callbacks suppressed
[  744.985165][T23951] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  745.027855][T23951] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  745.048995][T23951] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'.
[  745.071004][   T26] audit: type=1804 audit(1582736993.905:3894): pid=23955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir075261000/syzkaller.rYsf9h/401/bus" dev="sda1" ino=17100 res=1
[  745.138684][T23958] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  745.159952][T23958] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  745.182175][T23958] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'.
17:09:56 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:56 executing program 5:
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0xdd25}], 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0x82307201, &(0x7f0000000240))

17:09:56 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

17:09:56 executing program 3:
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:09:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000600053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:56 executing program 2:
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:09:56 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

[  747.633737][T23965] IPVS: ftp: loaded support on port[0] = 21
[  747.706022][T23975] IPVS: ftp: loaded support on port[0] = 21
17:09:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000700053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  747.824883][T23973] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  747.871097][T23983] IPVS: ftp: loaded support on port[0] = 21
17:09:56 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  748.059610][T23990] IPVS: ftp: loaded support on port[0] = 21
[  748.099652][T23986] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:09:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r2, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:09:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  748.261319][T23994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:09:57 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

[  748.403574][T24002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  748.448227][T23994] IPVS: ftp: loaded support on port[0] = 21
[  748.485055][T24002] IPVS: ftp: loaded support on port[0] = 21
[  748.627656][T24009] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  748.671168][T24009] IPVS: ftp: loaded support on port[0] = 21
17:09:59 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

17:09:59 executing program 5:
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:09:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a001400053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:09:59 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:09:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r2, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:09:59 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  750.785300][T24021] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  750.803946][T24024] IPVS: ftp: loaded support on port[0] = 21
17:09:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a003500053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  750.865785][T24022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  750.879687][T24037] IPVS: ftp: loaded support on port[0] = 21
[  750.921271][T24021] IPVS: ftp: loaded support on port[0] = 21
[  750.958347][T24039] IPVS: ftp: loaded support on port[0] = 21
[  751.006402][T24028] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a004000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:00 executing program 5:
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:10:00 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  751.428327][T24049] IPVS: ftp: loaded support on port[0] = 21
17:10:00 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  751.654568][T24060] IPVS: ftp: loaded support on port[0] = 21
[  751.763927][T24061] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  751.828318][T24061] IPVS: ftp: loaded support on port[0] = 21
17:10:02 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:02 executing program 2:
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:10:02 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)

17:10:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:02 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)

17:10:02 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  753.884241][T24083] IPVS: ftp: loaded support on port[0] = 21
[  753.897303][T24084] IPVS: ftp: loaded support on port[0] = 21
[  753.923600][T24077] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:02 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)

17:10:02 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00b000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000300053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  754.428911][T24093] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:03 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)

[  754.497555][T24110] IPVS: ftp: loaded support on port[0] = 21
[  754.505573][T24099] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  754.663161][T24103] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  754.819735][T24115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:05 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:05 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

17:10:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000400053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:05 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

17:10:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:05 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000600053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  757.087414][T24132] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  757.149511][T24142] IPVS: ftp: loaded support on port[0] = 21
[  757.153093][T24128] IPVS: ftp: loaded support on port[0] = 21
17:10:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000700053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:06 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  757.416202][T24130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:06 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

17:10:06 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:08 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000800053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:08 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

17:10:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:10:08 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:09 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

17:10:09 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  760.355141][T24196] IPVS: ftp: loaded support on port[0] = 21
17:10:09 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:09 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  760.492870][T24194] IPVS: ftp: loaded support on port[0] = 21
[  760.516797][T24180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a001000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  760.758011][T24181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:12 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:12 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:10:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

17:10:12 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)

17:10:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a001400053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:12 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:10:12 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  763.359883][T24237] IPVS: ftp: loaded support on port[0] = 21
17:10:12 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)

17:10:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a003500053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

17:10:12 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  763.902679][T24257] IPVS: ftp: loaded support on port[0] = 21
[  763.994997][T24261] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)

17:10:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
unshare(0x40000000)

17:10:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:15 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  766.483861][T24284] IPVS: ftp: loaded support on port[0] = 21
[  766.557821][T24270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  766.690492][T24274] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  766.801600][T24272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
unshare(0x40000000)

17:10:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)

17:10:15 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r1, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

[  767.178925][T24308] IPVS: ftp: loaded support on port[0] = 21
[  767.328897][T24304] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  767.357079][T24310] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  767.391111][T24313] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00b000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:18 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r0, 0xffffffffffffffff, 0x80000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:10:18 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

17:10:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)

17:10:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
unshare(0x40000000)

17:10:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0000b0053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  769.588307][T24330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  769.615884][T24331] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:18 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r0, 0xffffffffffffffff, 0x80000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  769.697313][T24346] IPVS: ftp: loaded support on port[0] = 21
[  769.857448][T24329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000204003582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  770.008096][T24332] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  770.085890][T24351] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:19 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
unshare(0x40000000)

17:10:19 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:19 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

[  770.419871][T24365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  770.475433][T24373] IPVS: ftp: loaded support on port[0] = 21
[  770.534807][T24372] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)

17:10:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000202053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:21 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r2, 0xffffffffffffffff, 0x80000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:21 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:21 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:21 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r2, 0xffffffffffffffff, 0x80000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  772.841769][T24386] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  772.909120][T24382] IPVS: ftp: loaded support on port[0] = 21
17:10:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000203053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:21 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  773.123804][T24407] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  773.164790][T24411] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:22 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:22 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000204053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:22 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  773.655399][T24433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:22 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000205053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  773.769746][T24445] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:22 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:22 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000206053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  774.050722][T24459] IPVS: ftp: loaded support on port[0] = 21
[  774.135274][T24455] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  774.171148][T24464] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:23 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  774.467038][T24477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:25 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000207053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:25 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:25 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  776.585436][T24491] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  776.644478][T24489] IPVS: ftp: loaded support on port[0] = 21
17:10:25 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  776.721914][T24493] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000209053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:25 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:25 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:10:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  777.187572][T24512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  777.321211][T24518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  777.437339][T24531] IPVS: ftp: loaded support on port[0] = 21
17:10:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:28 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00020a053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:28 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:28 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:28 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  779.726194][T24541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  779.765331][T24545] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:28 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  779.811820][T24555] IPVS: ftp: loaded support on port[0] = 21
17:10:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00020e053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:28 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:10:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  780.001878][T24561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:28 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  780.270689][T24572] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  780.472232][T24583] IPVS: ftp: loaded support on port[0] = 21
[  781.849986][    T0] NOHZ: local_softirq_pending 08
17:10:31 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:31 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00020f053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:10:31 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:31 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  782.891260][T24615] IPVS: ftp: loaded support on port[0] = 21
17:10:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  782.949943][T24620] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000248053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:10:32 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  783.330564][T24638] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:34 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:34 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:34 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00024c053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  786.039407][T24653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  786.266190][T24658] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000250053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:36 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:36 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:37 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  788.268675][T24684] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  788.555865][T24689] IPVS: ftp: loaded support on port[0] = 21
17:10:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000260053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:37 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:37 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:10:38 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000268053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  789.345235][T24710] IPVS: ftp: loaded support on port[0] = 21
17:10:38 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:38 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  789.541488][T24706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:38 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00026c053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:38 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:39 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:39 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:39 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000274053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:39 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

17:10:39 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:39 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:39 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

[  790.694243][T24790] IPVS: ftp: loaded support on port[0] = 21
17:10:39 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:10:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

17:10:40 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00027a053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:40 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002a2053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  791.522908][T24837] IPVS: ftp: loaded support on port[0] = 21
17:10:40 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  791.754121][T24822] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  792.055701][T24831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:41 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:41 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002b0053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:41 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:41 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:41 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:41 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:41 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  792.483061][T24880] IPVS: ftp: loaded support on port[0] = 21
17:10:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:41 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:41 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  793.022283][T24905] ptrace attach of "/root/syz-executor.0"[24904] was attempted by "/root/syz-executor.0"[24905]
17:10:41 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:41 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:41 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200063582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:41 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  793.231544][T24914] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:42 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  793.283812][T24923] ptrace attach of "/root/syz-executor.0"[24922] was attempted by "/root/syz-executor.0"[24923]
17:10:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:42 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  793.351642][T24927] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200093582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  793.476255][T24933] IPVS: ftp: loaded support on port[0] = 21
17:10:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:42 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  793.712515][T24943] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  793.728025][T24918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  793.852275][T24948] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  794.059121][T24924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200143582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:42 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:43 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  794.279170][T24962] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:43 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  794.483380][T24980] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  794.630370][T24979] IPVS: ftp: loaded support on port[0] = 21
17:10:43 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200353582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  794.974263][T24970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  794.984581][T25006] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  795.102376][T25007] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  795.237955][T24976] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  795.332341][T24996] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:44 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:44 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002005a3582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:44 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  795.577055][T25018] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:44 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  795.771560][T25035] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  795.793095][T25033] IPVS: ftp: loaded support on port[0] = 21
17:10:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:44 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:44 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:44 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  796.050348][T25017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  796.228315][T25029] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:10:45 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200043582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:45 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:45 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:45 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200063582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:45 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

[  796.730275][T25052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  796.909118][T25084] IPVS: ftp: loaded support on port[0] = 21
17:10:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:45 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200083582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  797.085637][T25076] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  797.140740][T25089] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:46 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

[  797.333630][T25094] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  797.573431][T25104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  797.880192][T25118] IPVS: ftp: loaded support on port[0] = 21
[  797.883045][T25113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:48 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:48 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200093582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:48 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:10:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  799.586423][T25127] validate_nla: 6 callbacks suppressed
[  799.586436][T25127] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  799.636171][T25136] IPVS: ftp: loaded support on port[0] = 21
17:10:48 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:10:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  799.741985][T25142] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  799.834837][T25128] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200103582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  800.063137][T25148] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  800.184117][T25152] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  800.198378][T25159] IPVS: ftp: loaded support on port[0] = 21
17:10:49 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:10:49 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:10:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  800.343958][T25162] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  800.452235][T25169] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  800.750767][T25170] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  801.001628][T25185] IPVS: ftp: loaded support on port[0] = 21
[  801.120687][T25180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:51 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:10:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200143582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:10:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  802.766566][T25195] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  802.805018][T25190] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  802.843336][T25196] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  802.854369][T25204] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  802.909206][T25201] IPVS: ftp: loaded support on port[0] = 21
17:10:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

[  802.960521][T25198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200353582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  803.121540][T25217] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  803.189712][T25220] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  803.257107][T25211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:52 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:10:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002005a3582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  803.544650][T25226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  803.578471][T25233] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  803.663628][T25230] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  803.723930][T25237] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:10:54 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:10:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:10:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  806.054685][T25246] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  806.074550][T25251] IPVS: ftp: loaded support on port[0] = 21
17:10:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  806.151504][T25262] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  806.189336][T25253] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  806.279282][T25254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:55 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:55 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  806.424079][T25266] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

17:10:55 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  806.612696][T25274] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  806.678480][T25275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  806.709637][T25276] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  806.741441][T25285] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  806.913575][T25287] IPVS: ftp: loaded support on port[0] = 21
[  806.927105][T25286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:57 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:10:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:57 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:10:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:10:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  809.281154][T25306] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  809.332193][T12053] tipc: TX() has been purged, node left!
17:10:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  809.395313][T25307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  809.418909][T25317] IPVS: ftp: loaded support on port[0] = 21
[  809.519339][T12053] tipc: TX() has been purged, node left!
[  809.558485][T25304] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:58 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  809.869866][T25324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  809.921762][T25330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:10:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:10:58 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:10:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  810.011707][T25335] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  810.078742][T12053] tipc: TX() has been purged, node left!
[  810.213274][T25340] IPVS: ftp: loaded support on port[0] = 21
[  810.359674][T12053] tipc: TX() has been purged, node left!
[  810.385109][T25354] IPVS: ftp: loaded support on port[0] = 21
[  810.407281][T25333] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  810.419409][T12053] tipc: TX() has been purged, node left!
[  810.430369][T12053] tipc: TX() has been purged, node left!
[  810.441981][T12053] tipc: TX() has been purged, node left!
[  810.453468][T12053] tipc: TX() has been purged, node left!
[  810.463565][T25343] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  810.471667][T12053] tipc: TX() has been purged, node left!
[  810.480914][T12053] tipc: TX() has been purged, node left!
[  810.487282][T12053] tipc: TX() has been purged, node left!
[  810.497918][T12053] tipc: TX() has been purged, node left!
[  810.504241][T12053] tipc: TX() has been purged, node left!
[  810.514671][T12053] tipc: TX() has been purged, node left!
[  810.521183][T12053] tipc: TX() has been purged, node left!
[  810.527877][T12053] tipc: TX() has been purged, node left!
[  810.531415][T25348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  810.541547][T12053] tipc: TX() has been purged, node left!
[  810.549737][T12053] tipc: TX() has been purged, node left!
[  810.556389][T12053] tipc: TX() has been purged, node left!
[  810.617876][T25346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  810.718992][T12053] tipc: TX() has been purged, node left!
[  810.868683][T12053] tipc: TX() has been purged, node left!
[  811.038761][T12053] tipc: TX() has been purged, node left!
[  811.208711][T12053] tipc: TX() has been purged, node left!
[  811.378713][T12053] tipc: TX() has been purged, node left!
[  811.598744][T12053] tipc: TX() has been purged, node left!
[  811.768845][T12053] tipc: TX() has been purged, node left!
[  811.969715][T12053] tipc: TX() has been purged, node left!
[  812.148693][T12053] tipc: TX() has been purged, node left!
17:11:01 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:01 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:11:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  812.328621][T12053] tipc: TX() has been purged, node left!
17:11:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  812.497405][T25367] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  812.508731][T12053] tipc: TX() has been purged, node left!
[  812.550768][T25365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  812.564378][T25377] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  812.569320][T25365] IPVS: ftp: loaded support on port[0] = 21
17:11:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  812.632003][T25369] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  812.667433][T12053] tipc: TX() has been purged, node left!
[  812.682576][T12053] tipc: TX() has been purged, node left!
[  812.699381][T12053] tipc: TX() has been purged, node left!
17:11:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050682c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  812.738592][T12053] tipc: TX() has been purged, node left!
[  812.771306][T12053] tipc: TX() has been purged, node left!
17:11:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  812.928770][T12053] tipc: TX() has been purged, node left!
[  812.973095][T25383] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  813.037033][T25391] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  813.098723][T12053] tipc: TX() has been purged, node left!
[  813.163494][T25402] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  813.166094][T25401] IPVS: ftp: loaded support on port[0] = 21
[  813.186711][T25403] IPVS: ftp: loaded support on port[0] = 21
[  813.245856][T25384] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  813.270575][T12053] tipc: TX() has been purged, node left!
[  813.285946][T12053] tipc: TX() has been purged, node left!
[  813.322267][T12053] tipc: TX() has been purged, node left!
[  813.359604][T12053] tipc: TX() has been purged, node left!
[  813.363409][T25392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  813.373452][T12053] tipc: TX() has been purged, node left!
[  813.388808][T12053] tipc: TX() has been purged, node left!
[  813.421206][T12053] tipc: TX() has been purged, node left!
[  813.445303][T12053] tipc: TX() has been purged, node left!
[  813.457079][T12053] tipc: TX() has been purged, node left!
[  813.473608][T12053] tipc: TX() has been purged, node left!
[  813.500159][T25394] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  813.517732][T12053] tipc: TX() has been purged, node left!
[  813.530965][T12053] tipc: TX() has been purged, node left!
[  813.559922][T12053] tipc: TX() has been purged, node left!
[  813.563378][T25405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  813.628792][T12053] tipc: TX() has been purged, node left!
[  813.779014][T12053] tipc: TX() has been purged, node left!
[  813.928773][T12053] tipc: TX() has been purged, node left!
[  814.118735][T12053] tipc: TX() has been purged, node left!
[  814.298672][T12053] tipc: TX() has been purged, node left!
[  814.458684][T12053] tipc: TX() has been purged, node left!
[  814.628770][T12053] tipc: TX() has been purged, node left!
[  814.808927][T12053] tipc: TX() has been purged, node left!
[  814.988667][T12053] tipc: TX() has been purged, node left!
[  815.168719][T12053] tipc: TX() has been purged, node left!
[  815.328712][T12053] tipc: TX() has been purged, node left!
17:11:04 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050782c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:04 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:11:04 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:04 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  815.508612][T12053] tipc: TX() has been purged, node left!
[  815.639730][T25422] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  815.669061][T12053] tipc: TX() has been purged, node left!
[  815.707529][T25420] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  815.741462][T25420] IPVS: ftp: loaded support on port[0] = 21
[  815.744355][T25433] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  815.761288][T25419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050882c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  815.804684][T25423] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  815.820427][T12053] tipc: TX() has been purged, node left!
[  815.826848][T12053] tipc: TX() has been purged, node left!
[  815.884205][T12053] tipc: TX() has been purged, node left!
[  815.893136][T12053] tipc: TX() has been purged, node left!
[  815.954931][T25438] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  816.003811][T25439] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  816.014346][T25424] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:04 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:04 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:04 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  816.088637][T12053] tipc: TX() has been purged, node left!
17:11:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050982c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  816.259072][T12053] tipc: TX() has been purged, node left!
[  816.333508][T25444] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  816.369158][T25446] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  816.408603][T12053] tipc: TX() has been purged, node left!
[  816.410142][T25454] IPVS: ftp: loaded support on port[0] = 21
[  816.464402][T25459] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  816.521100][T25461] IPVS: ftp: loaded support on port[0] = 21
[  816.552191][T25464] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  816.560769][T12053] tipc: TX() has been purged, node left!
[  816.567055][T12053] tipc: TX() has been purged, node left!
[  816.599069][T12053] tipc: TX() has been purged, node left!
[  816.611343][T12053] tipc: TX() has been purged, node left!
[  816.619123][T12053] tipc: TX() has been purged, node left!
[  816.655834][T12053] tipc: TX() has been purged, node left!
[  816.665054][T12053] tipc: TX() has been purged, node left!
[  816.732406][T12053] tipc: TX() has been purged, node left!
[  816.851373][T12053] tipc: TX() has been purged, node left!
[  817.018728][T12053] tipc: TX() has been purged, node left!
[  817.198611][T12053] tipc: TX() has been purged, node left!
[  817.368652][T12053] tipc: TX() has been purged, node left!
[  817.528608][T12053] tipc: TX() has been purged, node left!
[  817.698771][T12053] tipc: TX() has been purged, node left!
[  817.858674][T12053] tipc: TX() has been purged, node left!
[  818.048721][T12053] tipc: TX() has been purged, node left!
[  818.228696][T12053] tipc: TX() has been purged, node left!
[  818.388661][T12053] tipc: TX() has been purged, node left!
[  818.548716][T12053] tipc: TX() has been purged, node left!
17:11:07 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:07 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:07 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:07 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  818.738725][T12053] tipc: TX() has been purged, node left!
[  818.795598][T25472] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  818.840907][T25474] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  818.878966][T12053] tipc: TX() has been purged, node left!
[  818.894682][T25489] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  818.912169][T25474] IPVS: ftp: loaded support on port[0] = 21
[  818.917507][T25473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  818.943886][T25490] IPVS: ftp: loaded support on port[0] = 21
[  818.964058][T25476] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050b82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  818.993080][T12053] tipc: TX() has been purged, node left!
[  819.009977][T12053] tipc: TX() has been purged, node left!
[  819.040874][T12053] tipc: TX() has been purged, node left!
[  819.059199][T12053] tipc: TX() has been purged, node left!
[  819.075986][T25480] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  819.086652][T12053] tipc: TX() has been purged, node left!
[  819.098351][T25493] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:08 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:08 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)

[  819.134169][T12053] tipc: TX() has been purged, node left!
[  819.161321][T12053] tipc: TX() has been purged, node left!
[  819.206849][T12053] tipc: TX() has been purged, node left!
[  819.223753][T25494] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  819.251061][T12053] tipc: TX() has been purged, node left!
[  819.264756][T12053] tipc: TX() has been purged, node left!
[  819.299240][T12053] tipc: TX() has been purged, node left!
17:11:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050c82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:08 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  819.418694][T25499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  819.470624][T12053] tipc: TX() has been purged, node left!
[  819.567768][T25509] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  819.629518][T12053] tipc: TX() has been purged, node left!
[  819.667197][T25515] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  819.711810][T25510] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  819.770475][T25510] IPVS: ftp: loaded support on port[0] = 21
[  819.776510][T25513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  819.818328][T25513] IPVS: ftp: loaded support on port[0] = 21
[  819.824715][T12053] tipc: TX() has been purged, node left!
[  819.883240][T12053] tipc: TX() has been purged, node left!
[  819.889893][T12053] tipc: TX() has been purged, node left!
[  819.896267][T12053] tipc: TX() has been purged, node left!
[  819.912512][T12053] tipc: TX() has been purged, node left!
[  820.098653][T12053] tipc: TX() has been purged, node left!
[  820.258731][T12053] tipc: TX() has been purged, node left!
[  820.448810][T12053] tipc: TX() has been purged, node left!
[  820.608686][T12053] tipc: TX() has been purged, node left!
[  820.788724][T12053] tipc: TX() has been purged, node left!
[  820.960524][T12053] tipc: TX() has been purged, node left!
[  821.118621][T12053] tipc: TX() has been purged, node left!
[  821.278674][T12053] tipc: TX() has been purged, node left!
[  821.438707][T12053] tipc: TX() has been purged, node left!
[  821.530113][    T0] NOHZ: local_softirq_pending 08
[  821.618719][T12053] tipc: TX() has been purged, node left!
17:11:10 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:10 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)

17:11:10 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050d82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)

[  821.778651][T12053] tipc: TX() has been purged, node left!
[  821.929205][T25531] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  821.959003][T12053] tipc: TX() has been purged, node left!
17:11:10 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  821.990657][T25532] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.022834][T25544] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  822.022952][T25529] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.071947][T25530] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.089288][T25545] IPVS: ftp: loaded support on port[0] = 21
[  822.118796][T12053] tipc: TX() has been purged, node left!
[  822.125239][T12053] tipc: TX() has been purged, node left!
[  822.140650][T12053] tipc: TX() has been purged, node left!
[  822.151932][T12053] tipc: TX() has been purged, node left!
17:11:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050e82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  822.186767][T12053] tipc: TX() has been purged, node left!
[  822.194877][T25533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:11 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:11 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:11 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)

[  822.368865][T12053] tipc: TX() has been purged, node left!
[  822.376562][T25552] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  822.461867][T25558] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050f82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  822.562193][T12053] tipc: TX() has been purged, node left!
[  822.668915][T25561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.700730][T25563] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.709470][T12053] tipc: TX() has been purged, node left!
[  822.740471][T25575] IPVS: ftp: loaded support on port[0] = 21
[  822.755190][T25564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.788927][T12053] tipc: TX() has been purged, node left!
[  822.789328][T25566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  822.802720][T12053] tipc: TX() has been purged, node left!
17:11:11 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  822.845122][T12053] tipc: TX() has been purged, node left!
[  822.852445][T12053] tipc: TX() has been purged, node left!
[  822.870803][T12053] tipc: TX() has been purged, node left!
[  822.882071][T12053] tipc: TX() has been purged, node left!
17:11:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051082c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:11 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)

[  822.897106][T12053] tipc: TX() has been purged, node left!
[  822.966449][T12053] tipc: TX() has been purged, node left!
[  822.982815][T12053] tipc: TX() has been purged, node left!
[  823.012733][T12053] tipc: TX() has been purged, node left!
[  823.061548][T25579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:11 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  823.200186][T25589] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  823.238810][T12053] tipc: TX() has been purged, node left!
[  823.378958][T12053] tipc: TX() has been purged, node left!
[  823.498643][T12053] tipc: TX() has been purged, node left!
[  823.658641][T12053] tipc: TX() has been purged, node left!
[  823.818734][T12053] tipc: TX() has been purged, node left!
[  823.988842][T12053] tipc: TX() has been purged, node left!
[  824.148596][T12053] tipc: TX() has been purged, node left!
[  824.298639][T12053] tipc: TX() has been purged, node left!
[  824.478626][T12053] tipc: TX() has been purged, node left!
[  824.658698][T12053] tipc: TX() has been purged, node left!
[  824.828704][T12053] tipc: TX() has been purged, node left!
[  825.008782][T12053] tipc: TX() has been purged, node left!
17:11:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:14 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:14 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)

17:11:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051182c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  825.178692][T12053] tipc: TX() has been purged, node left!
[  825.286398][T25609] validate_nla: 4 callbacks suppressed
[  825.286410][T25609] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:14 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  825.353984][T25606] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  825.399121][T12053] tipc: TX() has been purged, node left!
[  825.415480][T25621] IPVS: ftp: loaded support on port[0] = 21
[  825.436651][T25622] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  825.545432][T12053] tipc: TX() has been purged, node left!
[  825.554620][T12053] tipc: TX() has been purged, node left!
[  825.567194][T12053] tipc: TX() has been purged, node left!
[  825.592038][T25608] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  825.631195][T25632] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  825.693398][T25634] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  825.705794][T25626] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)

17:11:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  825.809853][T12053] tipc: TX() has been purged, node left!
[  825.938793][T12053] tipc: TX() has been purged, node left!
[  826.069044][T12053] tipc: TX() has been purged, node left!
[  826.082159][T25643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  826.103414][T25643] IPVS: ftp: loaded support on port[0] = 21
[  826.120474][T12053] tipc: TX() has been purged, node left!
[  826.128753][T12053] tipc: TX() has been purged, node left!
[  826.151720][T25653] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  826.165092][T12053] tipc: TX() has been purged, node left!
[  826.240327][T25649] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  826.253981][T25653] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  826.319115][T12053] tipc: TX() has been purged, node left!
17:11:17 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:17 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  828.451972][T25664] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  828.526450][T25659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  828.574561][T25676] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  828.588412][T25677] IPVS: ftp: loaded support on port[0] = 21
17:11:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  828.699165][T25665] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  828.811402][T25681] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:17 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  828.952337][T25689] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  829.104256][T25701] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  829.146399][T25697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  829.176780][T25698] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:20 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:11:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:20 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:20 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051682c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  831.608657][T25716] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  831.635023][T25714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:20 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  831.723171][T25715] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  831.737780][T25714] IPVS: ftp: loaded support on port[0] = 21
[  831.773548][T25729] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:20 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051782c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  832.031975][T25732] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  832.044092][T25742] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  832.133826][T25745] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  832.216143][T25743] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  832.287566][T25749] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:23 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:11:23 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051882c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:23 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

[  834.716079][T25765] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  834.742136][T25762] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  834.747785][T25769] IPVS: ftp: loaded support on port[0] = 21
[  834.814526][T25759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  834.862544][T25776] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  834.891405][T25767] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:23 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:23 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:11:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051982c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  835.184587][T25780] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  835.221934][T25780] IPVS: ftp: loaded support on port[0] = 21
[  835.244922][T25798] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  835.257751][T25786] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  835.319794][T25789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  835.345345][T25791] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:24 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  835.369939][T25799] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  835.614084][T25803] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  835.636279][T25807] IPVS: ftp: loaded support on port[0] = 21
17:11:26 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:26 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:26 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:26 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:26 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  837.840433][T25817] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:26 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  837.903269][T25828] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  837.912362][T25815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  837.987157][T25832] IPVS: ftp: loaded support on port[0] = 21
[  837.996610][T25814] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  838.042663][T25819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051b82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:26 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:26 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  838.112095][T25834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:27 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  838.349773][T25846] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  838.381783][T25844] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:27 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  838.415070][T25848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  838.493664][T25854] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  838.666406][T25857] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  838.682317][T25860] IPVS: ftp: loaded support on port[0] = 21
17:11:29 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:29 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:29 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:29 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051c82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:29 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  840.991399][T25871] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:29 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:29 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  841.051330][T25869] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  841.067685][T25877] IPVS: ftp: loaded support on port[0] = 21
[  841.082071][T25880] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  841.172647][T25872] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051d82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:30 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:30 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  841.457235][T25892] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  841.549866][T25893] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  841.563832][T25902] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  841.576216][T25893] IPVS: ftp: loaded support on port[0] = 21
[  841.619037][T25900] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:32 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:32 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:32 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051e82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:32 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  844.110550][T25914] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  844.154220][T25917] IPVS: ftp: loaded support on port[0] = 21
[  844.160165][T25918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:33 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:33 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  844.291746][T25924] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:33 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:11:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052182c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:33 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  844.543559][T25935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  844.557035][T25939] IPVS: ftp: loaded support on port[0] = 21
[  844.792098][T25948] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  844.924419][T25951] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:35 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:11:35 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:35 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:35 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:35 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:36 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  847.262973][T25964] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  847.298264][T25959] IPVS: ftp: loaded support on port[0] = 21
17:11:36 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  847.401792][T25960] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  847.413122][T25973] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:36 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:36 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:36 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:36 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  847.754759][T25987] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:36 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  847.833492][T25990] IPVS: ftp: loaded support on port[0] = 21
[  847.911967][T25998] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  848.117146][T26002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:39 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:39 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:39 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:39 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:39 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  850.386187][T26020] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  850.431831][T26018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  850.437700][T26017] IPVS: ftp: loaded support on port[0] = 21
[  850.464876][T26030] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:39 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:39 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:39 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:39 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:11:39 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  850.956737][T26047] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  850.970697][T26048] IPVS: ftp: loaded support on port[0] = 21
[  851.073980][T26053] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:42 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:42 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:42 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:42 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:42 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052682c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:42 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:42 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  853.559901][T26071] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  853.571043][T26065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  853.599705][T26076] IPVS: ftp: loaded support on port[0] = 21
17:11:42 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:42 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  853.755260][T26087] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:42 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052782c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  854.212697][T26102] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  854.293174][T26104] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:45 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:45 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:45 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:45 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:45 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052882c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  856.664350][T26112] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:45 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  856.715423][T26117] IPVS: ftp: loaded support on port[0] = 21
17:11:45 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:45 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  856.843667][T26125] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:45 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052982c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:45 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  857.201487][T26137] IPVS: ftp: loaded support on port[0] = 21
[  857.216004][T26142] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  857.296441][T26146] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:48 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:48 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:48 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:48 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:48 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:11:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  859.790269][T26161] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:48 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:48 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:48 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  859.872072][T26169] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  859.974537][T26167] IPVS: ftp: loaded support on port[0] = 21
17:11:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052b82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:48 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:49 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  860.303876][T26186] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  860.434366][T26190] IPVS: ftp: loaded support on port[0] = 21
[  860.463548][T26195] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:51 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:51 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:51 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052c82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:51 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  862.971911][T26203] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:51 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  863.073233][T26209] IPVS: ftp: loaded support on port[0] = 21
[  863.084946][T26217] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:51 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:52 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:52 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052d82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:52 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  863.513039][T26235] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  863.624078][T26241] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:54 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:54 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:54 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:54 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:11:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052e82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  866.064712][T26252] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:54 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  866.105977][T26253] IPVS: ftp: loaded support on port[0] = 21
17:11:55 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:55 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  866.191094][T26263] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052f82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:11:55 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:55 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  866.499103][T26278] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  866.593085][T26283] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:57 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:11:57 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:57 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:11:57 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053082c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  869.206002][T26301] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:58 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  869.307920][T26299] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  869.317666][T26302] IPVS: ftp: loaded support on port[0] = 21
17:11:58 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:58 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  869.353932][T26313] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:11:58 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:11:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053182c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  869.559470][T26317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:11:58 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  869.670218][T26326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  869.770733][T26333] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  869.874633][T26334] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  869.903402][T26339] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:01 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:01 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:01 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:01 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:01 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  872.368321][T26353] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:01 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  872.416162][T26348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  872.442327][T26350] IPVS: ftp: loaded support on port[0] = 21
[  872.474276][T26363] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  872.485950][T26352] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:01 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:01 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:01 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:01 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

[  872.795080][T26377] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  872.863784][T26378] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  872.892326][T26382] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  873.125757][T26387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:04 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:04 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:04 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:04 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:04 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

[  875.495854][T26402] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  875.517507][T26396] IPVS: ftp: loaded support on port[0] = 21
17:12:04 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  875.581743][T26406] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  875.592748][T26414] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:04 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  875.667917][T26403] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200055a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:04 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:04 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:04 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  875.849391][T26418] IPVS: ftp: loaded support on port[0] = 21
[  875.930203][T26424] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  876.020443][T26429] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  876.142676][T26433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:07 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:07 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:07 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:07 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582ca37153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:07 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  878.590441][T26453] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:07 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  878.645635][T26450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  878.684968][T26459] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:07 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:07 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  878.751821][T26457] IPVS: ftp: loaded support on port[0] = 21
17:12:07 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  878.885918][T26468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  878.928909][T26471] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c10a153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:07 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  879.195887][T26485] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  879.295427][T26490] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  879.313583][T26486] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:10 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:10 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:10 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

17:12:10 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:10 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:12:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c15a153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  881.747537][T26500] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  881.801989][T26509] IPVS: ftp: loaded support on port[0] = 21
17:12:10 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  881.844934][T26499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  881.884577][T26515] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  881.885934][T26502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:10 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:12:10 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

17:12:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137353e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  882.061316][T26517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:10 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:11 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

[  882.296560][T26524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  882.300820][T26532] IPVS: ftp: loaded support on port[0] = 21
[  882.330040][T26530] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  882.378451][T26533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  882.390762][T26537] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  882.487971][T26538] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:13 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:13 executing program 3:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:13 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c1375a3e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:13 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:13 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  884.849590][T26553] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  884.921403][T26557] IPVS: ftp: loaded support on port[0] = 21
[  884.927834][T26554] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  884.952482][T26566] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  884.978958][T26555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  885.028670][T26552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137155a370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:13 executing program 3:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:14 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

17:12:14 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)

[  885.230476][T26571] IPVS: ftp: loaded support on port[0] = 21
17:12:14 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  885.409316][T26579] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  885.434840][T26575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  885.461687][T26582] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:14 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)

[  885.588750][T26586] IPVS: ftp: loaded support on port[0] = 21
[  885.626035][T26581] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  885.789024][T26592] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:16 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:16 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e0a0a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:12:16 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:16 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  887.985748][T26603] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:16 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  888.036516][T26604] IPVS: ftp: loaded support on port[0] = 21
[  888.079735][T26605] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  888.095679][T26615] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:17 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  888.177126][T26618] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:17 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e5a0a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:17 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  888.440426][T26623] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  888.473146][T26627] IPVS: ftp: loaded support on port[0] = 21
[  888.490460][T26630] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:17 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)

[  888.578277][T26635] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  888.598482][T26633] IPVS: ftp: loaded support on port[0] = 21
[  888.820428][T26637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:19 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370200018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:12:19 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

17:12:19 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)

17:12:19 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  891.141175][T26650] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  891.155924][T26650] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  891.214976][T26653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  891.228457][T26654] IPVS: ftp: loaded support on port[0] = 21
[  891.243165][T26665] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  891.262331][T26665] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  891.278459][T26655] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:20 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)

17:12:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370300018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:20 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:12:20 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  891.550294][T26670] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  891.587087][T26670] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  891.605321][T26672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  891.658852][T26679] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  891.684126][T26679] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:20 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  891.707497][T26674] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:20 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

[  891.833558][T26680] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  891.861932][T26683] IPVS: ftp: loaded support on port[0] = 21
[  892.055583][T26688] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:23 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:23 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:23 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)

17:12:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:23 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  894.297487][T26705] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  894.358832][T26703] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  894.373123][T26713] IPVS: ftp: loaded support on port[0] = 21
[  894.373192][T26701] IPVS: ftp: loaded support on port[0] = 21
[  894.393299][T26715] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  894.426563][T26706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370500018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  894.593481][T26718] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:23 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  894.710574][T26721] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  894.764726][T26720] IPVS: ftp: loaded support on port[0] = 21
17:12:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370600018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  894.963989][T26726] IPVS: ftp: loaded support on port[0] = 21
[  894.974589][T26724] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  895.037367][T26729] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  895.051459][T26729] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[  895.142527][T26730] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  895.152267][T26730] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:24 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370800018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  895.358272][T26737] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  895.367178][T26737] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[  895.413475][T26738] IPVS: ftp: loaded support on port[0] = 21
[  895.435889][T26739] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  895.463106][T26739] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[  895.469192][T26734] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:26 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:26 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370900018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:26 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  897.337615][T26747] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  897.430099][T26752] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  897.513441][T26746] IPVS: ftp: loaded support on port[0] = 21
[  897.524741][T26753] IPVS: ftp: loaded support on port[0] = 21
[  897.546870][T26748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:27 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370b00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:27 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:27 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  898.973150][T26762] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  899.075361][T26761] IPVS: ftp: loaded support on port[0] = 21
[  899.090441][T26765] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  899.119935][T26772] IPVS: ftp: loaded support on port[0] = 21
[  899.134119][T26774] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  899.227292][T26771] IPVS: ftp: loaded support on port[0] = 21
17:12:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371000018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:28 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  899.403710][T26776] validate_nla: 2 callbacks suppressed
[  899.403723][T26776] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  899.418858][T26776] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  899.483755][T26778] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  899.520190][T26778] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371100018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  899.634556][T26781] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  899.656524][T26783] IPVS: ftp: loaded support on port[0] = 21
[  899.721293][T26786] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  899.751715][T26786] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  899.846219][T26787] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  899.873182][T26787] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:29 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371200018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:29 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:29 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110)
unshare(0x40000000)

[  900.519322][T26796] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  900.541510][T26796] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  900.602732][T26795] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  900.612617][T26805] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  900.638731][T26805] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  900.651810][T26794] IPVS: ftp: loaded support on port[0] = 21
[  900.655931][T26795] IPVS: ftp: loaded support on port[0] = 21
17:12:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371300018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  900.924655][T26808] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  900.949723][T26808] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  901.065103][T26810] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  901.092557][T26810] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:30 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:30 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:30 executing program 5:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  902.057277][T26816] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  902.084372][T26824] IPVS: ftp: loaded support on port[0] = 21
[  902.107077][T26816] IPVS: ftp: loaded support on port[0] = 21
[  902.182401][T26817] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18)

17:12:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371400018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:32 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  903.464690][T26831] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:32 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  903.511292][T26832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  903.532763][T26835] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  903.549741][T26832] IPVS: ftp: loaded support on port[0] = 21
17:12:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371600018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  903.740521][T26830] IPVS: ftp: loaded support on port[0] = 21
[  903.780104][T26836] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:32 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e372500018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  904.204408][T26850] IPVS: ftp: loaded support on port[0] = 21
[  904.242345][T26857] __nla_validate_parse: 4 callbacks suppressed
[  904.242363][T26857] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  904.265805][T26853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  904.297752][T26858] IPVS: ftp: loaded support on port[0] = 21
[  904.385842][T26859] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:33 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e373500018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:33 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

17:12:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)

[  905.086915][T26868] validate_nla: 4 callbacks suppressed
[  905.086928][T26868] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  905.103435][T26868] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  905.190618][T26876] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  905.210663][T26876] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  905.216745][T26877] IPVS: ftp: loaded support on port[0] = 21
[  905.250723][T26863] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e375000018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  905.356721][T26869] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  905.431711][T26880] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  905.440394][T26880] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  905.511704][T26882] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  905.520348][T26882] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:36 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:36 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x0)

17:12:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e375a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:36 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:36 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  907.820527][T26891] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  907.867802][T26891] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:36 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  907.982411][T26894] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  907.992888][T26907] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  908.001736][T26907] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  908.008141][T26902] IPVS: ftp: loaded support on port[0] = 21
[  908.060160][T26897] IPVS: ftp: loaded support on port[0] = 21
17:12:37 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e374501018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:37 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x0)

17:12:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  908.333074][T26918] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  908.363559][T26918] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  908.394226][T26917] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  908.493320][T26928] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  908.527857][T26928] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:37 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x0)

17:12:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

17:12:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e375230018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  908.944807][T26944] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)

[  909.044256][T26941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  909.055715][T26951] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  909.247216][T26956] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  909.357191][T26954] IPVS: ftp: loaded support on port[0] = 21
17:12:40 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10)

17:12:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a03008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
unshare(0x40000000)

17:12:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  911.508401][T26969] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  911.518398][T26969] __nla_validate_parse: 2 callbacks suppressed
[  911.518410][T26969] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  911.610537][T26976] IPVS: ftp: loaded support on port[0] = 21
[  911.618335][T26978] IPVS: ftp: loaded support on port[0] = 21
[  911.624907][T26980] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  911.650697][T26980] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  911.727580][T26964] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a04008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

[  911.905758][T26983] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  911.928141][T26983] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  912.030507][T26989] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  912.066854][T26989] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)

17:12:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

[  912.094241][T26988] IPVS: ftp: loaded support on port[0] = 21
17:12:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3b008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  912.373665][T27002] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  912.393284][T27002] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  912.466233][T27005] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  912.500998][T26997] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  912.512591][T27005] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  912.559993][T26998] IPVS: ftp: loaded support on port[0] = 21
17:12:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3c008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  912.800553][T27009] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  912.822486][T27009] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  912.897395][T27010] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  912.906371][T27010] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:43 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:12:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:12:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3d008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  914.565032][T27019] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  914.616734][T27019] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  914.753067][T27027] IPVS: ftp: loaded support on port[0] = 21
[  914.792127][T27014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  914.801010][T27025] IPVS: ftp: loaded support on port[0] = 21
[  914.815735][T27030] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  914.861060][T27030] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  914.862749][T27020] IPVS: ftp: loaded support on port[0] = 21
17:12:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00')
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:12:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3e008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:44 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a41008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  915.401745][T27035] IPVS: ftp: loaded support on port[0] = 21
17:12:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:12:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
unshare(0x40000000)

17:12:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a42008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  915.744206][T27050] IPVS: ftp: loaded support on port[0] = 21
[  915.951157][T27048] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  916.042086][T27054] IPVS: ftp: loaded support on port[0] = 21
17:12:46 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a43008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0})
timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980)
dup3(r3, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240))
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00')
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r6}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r6, 0x0, '^V3', "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"}}, 0x110)
unshare(0x40000000)

17:12:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])

[  917.670296][T27065] validate_nla: 6 callbacks suppressed
[  917.670309][T27065] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  917.736948][T27065] __nla_validate_parse: 6 callbacks suppressed
[  917.736957][T27065] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])

[  917.847849][T27066] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  917.864685][T27074] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  917.890909][T27074] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  918.041604][T27066] IPVS: ftp: loaded support on port[0] = 21
17:12:48 executing program 1 (fault-call:3 fault-nth:0):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a44008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])

17:12:48 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:48 executing program 2 (fault-call:8 fault-nth:0):
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

[  919.800170][T27086] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  919.830532][T27091] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  919.843044][T27094] FAULT_INJECTION: forcing a failure.
[  919.843044][T27094] name failslab, interval 1, probability 0, space 0, times 0
[  919.853974][T27091] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  919.863431][T27094] CPU: 1 PID: 27094 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  919.874681][T27094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  919.884770][T27094] Call Trace:
[  919.888371][T27094]  dump_stack+0x197/0x210
[  919.892777][T27094]  should_fail.cold+0x5/0xd
[  919.897308][T27094]  ? fault_create_debugfs_attr+0x140/0x140
[  919.903144][T27094]  ? ___might_sleep+0x163/0x2c0
[  919.908046][T27094]  __should_failslab+0xb7/0x100
[  919.913027][T27094]  should_failslab+0x9/0x14
[  919.917606][T27094]  kmem_cache_alloc_trace+0x2d3/0x790
[  919.923139][T27094]  ? xas_find_conflict+0x890/0x890
[  919.928259][T27094]  ? rcu_read_lock_held+0x9c/0xb0
[  919.933385][T27094]  cma_alloc_port+0x56/0x1b0
[  919.937996][T27094]  rdma_bind_addr+0x1659/0x1f80
[  919.942882][T27094]  ? cma_ndev_work_handler+0x190/0x190
[  919.948352][T27094]  ? lock_downgrade+0x920/0x920
[  919.953215][T27094]  ? rwlock_bug.part.0+0x90/0x90
[  919.958197][T27094]  rdma_listen+0xa3/0x970
[  919.962561][T27094]  ? _raw_spin_unlock+0x28/0x40
[  919.967501][T27094]  ucma_listen+0x14d/0x1c0
[  919.971930][T27094]  ? ucma_notify+0x190/0x190
[  919.976535][T27094]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  919.984186][T27094]  ? _copy_from_user+0x12c/0x1a0
[  919.989142][T27094]  ucma_write+0x2d7/0x3c0
[  919.993491][T27094]  ? ucma_notify+0x190/0x190
[  919.998113][T27094]  ? ucma_open+0x290/0x290
[  920.002796][T27094]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  920.009094][T27094]  ? security_file_permission+0x8f/0x380
[  920.014751][T27094]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  920.020209][T27094]  __vfs_write+0x8a/0x110
[  920.024603][T27094]  ? ucma_open+0x290/0x290
[  920.029043][T27094]  vfs_write+0x268/0x5d0
[  920.033310][T27094]  ksys_write+0x220/0x290
[  920.037645][T27094]  ? __ia32_sys_read+0xb0/0xb0
[  920.042426][T27094]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  920.047925][T27094]  ? do_syscall_64+0x26/0x790
[  920.052609][T27094]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  920.058933][T27094]  ? do_syscall_64+0x26/0x790
[  920.063654][T27094]  __x64_sys_write+0x73/0xb0
[  920.068272][T27094]  do_syscall_64+0xfa/0x790
[  920.072801][T27094]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  920.079735][T27094] RIP: 0033:0x45c449
[  920.083645][T27094] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  920.103383][T27094] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  920.111985][T27094] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  920.119970][T27094] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  920.127961][T27094] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  920.135932][T27094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  920.143926][T27094] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000000
[  920.162251][T27086] IPVS: ftp: loaded support on port[0] = 21
17:12:49 executing program 1 (fault-call:3 fault-nth:1):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  920.232170][T27099] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  920.244447][T27099] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])

[  920.432509][T27101] FAULT_INJECTION: forcing a failure.
[  920.432509][T27101] name failslab, interval 1, probability 0, space 0, times 0
[  920.445884][T27101] CPU: 1 PID: 27101 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  920.454776][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  920.464964][T27101] Call Trace:
[  920.468276][T27101]  dump_stack+0x197/0x210
[  920.473175][T27101]  should_fail.cold+0x5/0xd
[  920.477711][T27101]  ? fault_create_debugfs_attr+0x140/0x140
[  920.483553][T27101]  ? stack_trace_save+0x8f/0xc0
[  920.488428][T27101]  ? stack_trace_consume_entry+0x170/0x170
[  920.494484][T27101]  __should_failslab+0xb7/0x100
[  920.499367][T27101]  should_failslab+0x9/0x14
[  920.503892][T27101]  kmem_cache_alloc+0x47/0x710
[  920.508710][T27101]  ? save_stack+0x5c/0x90
[  920.513060][T27101]  ? save_stack+0x23/0x90
[  920.517419][T27101]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  920.524455][T27101]  ? kasan_kmalloc+0x9/0x10
[  920.528975][T27101]  ? kmem_cache_alloc_trace+0x158/0x790
[  920.534553][T27101]  xas_alloc+0x346/0x460
[  920.538824][T27101]  xas_create+0x2cd/0x1060
[  920.543304][T27101]  xas_store+0x9a/0x1a00
[  920.547578][T27101]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  920.553838][T27101]  ? xas_start+0x166/0x560
[  920.558372][T27101]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  920.564735][T27101]  ? xas_load+0x67/0x150
[  920.569005][T27101]  __xa_insert+0x17b/0x2a0
[  920.573556][T27101]  ? __xa_cmpxchg+0x2f0/0x2f0
[  920.578291][T27101]  cma_alloc_port+0xb9/0x1b0
[  920.582911][T27101]  rdma_bind_addr+0x1659/0x1f80
[  920.587809][T27101]  ? cma_ndev_work_handler+0x190/0x190
[  920.593283][T27101]  ? lock_downgrade+0x920/0x920
[  920.598158][T27101]  ? rwlock_bug.part.0+0x90/0x90
[  920.603116][T27101]  rdma_listen+0xa3/0x970
[  920.607990][T27101]  ? _raw_spin_unlock+0x28/0x40
[  920.612853][T27101]  ucma_listen+0x14d/0x1c0
[  920.617297][T27101]  ? ucma_notify+0x190/0x190
[  920.621903][T27101]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  920.628228][T27101]  ? _copy_from_user+0x12c/0x1a0
[  920.633348][T27101]  ucma_write+0x2d7/0x3c0
[  920.637693][T27101]  ? ucma_notify+0x190/0x190
[  920.642301][T27101]  ? ucma_open+0x290/0x290
[  920.646729][T27101]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  920.652976][T27101]  ? security_file_permission+0x8f/0x380
[  920.658638][T27101]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  920.663947][T27101]  __vfs_write+0x8a/0x110
[  920.668288][T27101]  ? ucma_open+0x290/0x290
[  920.672715][T27101]  vfs_write+0x268/0x5d0
[  920.676994][T27101]  ksys_write+0x220/0x290
17:12:49 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:49 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

17:12:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a45008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  920.681349][T27101]  ? __ia32_sys_read+0xb0/0xb0
[  920.686126][T27101]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  920.691611][T27101]  ? do_syscall_64+0x26/0x790
[  920.696301][T27101]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  920.702380][T27101]  ? do_syscall_64+0x26/0x790
[  920.707194][T27101]  __x64_sys_write+0x73/0xb0
[  920.711804][T27101]  do_syscall_64+0xfa/0x790
[  920.716337][T27101]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  920.722241][T27101] RIP: 0033:0x45c449
[  920.726144][T27101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  920.745889][T27101] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  920.754430][T27101] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  920.762425][T27101] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  920.770417][T27101] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  920.778407][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  920.786394][T27101] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000001
17:12:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])

[  920.853999][T27115] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  920.859807][T27101] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  920.869739][T27115] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  920.888044][T27114] IPVS: ftp: loaded support on port[0] = 21
17:12:49 executing program 1 (fault-call:3 fault-nth:2):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  920.973923][T27111] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  921.009206][T27111] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  921.103725][T27124] FAULT_INJECTION: forcing a failure.
[  921.103725][T27124] name failslab, interval 1, probability 0, space 0, times 0
[  921.116922][T27124] CPU: 1 PID: 27124 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  921.125635][T27124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  921.135704][T27124] Call Trace:
[  921.139021][T27124]  dump_stack+0x197/0x210
[  921.143386][T27124]  should_fail.cold+0x5/0xd
[  921.147917][T27124]  ? fault_create_debugfs_attr+0x140/0x140
17:12:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a46008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  921.154047][T27124]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  921.159653][T27124]  __should_failslab+0xb7/0x100
[  921.164527][T27124]  should_failslab+0x9/0x14
[  921.169165][T27124]  kmem_cache_alloc+0x47/0x710
[  921.173971][T27124]  xas_alloc+0x346/0x460
[  921.178240][T27124]  xas_create+0x2cd/0x1060
[  921.182698][T27124]  xas_store+0x9a/0x1a00
[  921.186973][T27124]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  921.193245][T27124]  ? xas_start+0x166/0x560
[  921.197688][T27124]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  921.203957][T27124]  ? xas_load+0x67/0x150
[  921.208223][T27124]  __xa_insert+0x17b/0x2a0
[  921.212866][T27124]  ? __xa_cmpxchg+0x2f0/0x2f0
[  921.220289][T27124]  cma_alloc_port+0xb9/0x1b0
[  921.224921][T27124]  rdma_bind_addr+0x1659/0x1f80
[  921.229833][T27124]  ? cma_ndev_work_handler+0x190/0x190
[  921.235313][T27124]  ? lock_downgrade+0x920/0x920
[  921.240302][T27124]  ? rwlock_bug.part.0+0x90/0x90
[  921.245476][T27124]  rdma_listen+0xa3/0x970
[  921.249823][T27124]  ? _raw_spin_unlock+0x28/0x40
[  921.254693][T27124]  ucma_listen+0x14d/0x1c0
[  921.259114][T27124]  ? ucma_notify+0x190/0x190
[  921.263728][T27124]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  921.269991][T27124]  ? _copy_from_user+0x12c/0x1a0
[  921.275062][T27124]  ucma_write+0x2d7/0x3c0
[  921.279399][T27124]  ? ucma_notify+0x190/0x190
[  921.284000][T27124]  ? ucma_open+0x290/0x290
[  921.288444][T27124]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  921.294705][T27124]  ? security_file_permission+0x8f/0x380
[  921.300352][T27124]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  921.305670][T27124]  __vfs_write+0x8a/0x110
[  921.310010][T27124]  ? ucma_open+0x290/0x290
[  921.314506][T27124]  vfs_write+0x268/0x5d0
[  921.318786][T27124]  ksys_write+0x220/0x290
[  921.323125][T27124]  ? __ia32_sys_read+0xb0/0xb0
[  921.327903][T27124]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  921.333376][T27124]  ? do_syscall_64+0x26/0x790
[  921.338054][T27124]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  921.344234][T27124]  ? do_syscall_64+0x26/0x790
[  921.348952][T27124]  __x64_sys_write+0x73/0xb0
[  921.353568][T27124]  do_syscall_64+0xfa/0x790
[  921.358101][T27124]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  921.364152][T27124] RIP: 0033:0x45c449
[  921.368135][T27124] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  921.387893][T27124] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  921.396379][T27124] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  921.404410][T27124] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  921.412414][T27124] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  921.420412][T27124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  921.428454][T27124] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000002
17:12:50 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1b6, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

17:12:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])

[  921.607253][T27124] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  921.639271][T27128] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  921.661355][T27128] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  921.700011][T27133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  921.720093][T27133] IPVS: ftp: loaded support on port[0] = 21
[  921.796015][T27128] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  921.809933][T27128] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  921.883888][T27139] IPVS: ftp: loaded support on port[0] = 21
17:12:51 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:51 executing program 1 (fault-call:3 fault-nth:3):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

17:12:51 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xa0200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

[  922.871609][T27149] FAULT_INJECTION: forcing a failure.
[  922.871609][T27149] name failslab, interval 1, probability 0, space 0, times 0
[  922.884752][T27149] CPU: 1 PID: 27149 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  922.893555][T27149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  922.903714][T27149] Call Trace:
[  922.907029][T27149]  dump_stack+0x197/0x210
[  922.911390][T27149]  should_fail.cold+0x5/0xd
[  922.916076][T27149]  ? fault_create_debugfs_attr+0x140/0x140
[  922.922035][T27149]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  922.927615][T27149]  __should_failslab+0xb7/0x100
[  922.932504][T27149]  should_failslab+0x9/0x14
[  922.937036][T27149]  kmem_cache_alloc+0x47/0x710
[  922.941841][T27149]  xas_alloc+0x346/0x460
[  922.946147][T27149]  xas_create+0x2cd/0x1060
[  922.950606][T27149]  xas_store+0x9a/0x1a00
[  922.954871][T27149]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  922.961137][T27149]  ? xas_start+0x166/0x560
[  922.965592][T27149]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  922.971867][T27149]  ? xas_load+0x67/0x150
[  922.976145][T27149]  __xa_insert+0x17b/0x2a0
[  922.980602][T27149]  ? __xa_cmpxchg+0x2f0/0x2f0
[  922.985336][T27149]  cma_alloc_port+0xb9/0x1b0
[  922.989997][T27149]  rdma_bind_addr+0x1659/0x1f80
[  922.994892][T27149]  ? cma_ndev_work_handler+0x190/0x190
[  923.000369][T27149]  ? lock_downgrade+0x920/0x920
[  923.005398][T27149]  ? rwlock_bug.part.0+0x90/0x90
[  923.010381][T27149]  rdma_listen+0xa3/0x970
[  923.014733][T27149]  ? _raw_spin_unlock+0x28/0x40
[  923.019616][T27149]  ucma_listen+0x14d/0x1c0
[  923.024067][T27149]  ? ucma_notify+0x190/0x190
[  923.028716][T27149]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  923.035074][T27149]  ? _copy_from_user+0x12c/0x1a0
[  923.040050][T27149]  ucma_write+0x2d7/0x3c0
[  923.044627][T27149]  ? ucma_notify+0x190/0x190
[  923.049246][T27149]  ? ucma_open+0x290/0x290
[  923.053699][T27149]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  923.060076][T27149]  ? security_file_permission+0x8f/0x380
[  923.065733][T27149]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  923.071060][T27149]  __vfs_write+0x8a/0x110
[  923.075759][T27149]  ? ucma_open+0x290/0x290
[  923.080548][T27149]  vfs_write+0x268/0x5d0
[  923.084830][T27149]  ksys_write+0x220/0x290
[  923.089224][T27149]  ? __ia32_sys_read+0xb0/0xb0
[  923.094041][T27149]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  923.099524][T27149]  ? do_syscall_64+0x26/0x790
[  923.104226][T27149]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  923.110351][T27149]  ? do_syscall_64+0x26/0x790
[  923.115070][T27149]  __x64_sys_write+0x73/0xb0
[  923.119691][T27149]  do_syscall_64+0xfa/0x790
[  923.124237][T27149]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  923.130144][T27149] RIP: 0033:0x45c449
[  923.134107][T27149] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  923.153826][T27149] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  923.162324][T27149] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  923.170313][T27149] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  923.178440][T27149] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  923.186434][T27149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  923.194508][T27149] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000003
[  923.215707][T27157] IPVS: ftp: loaded support on port[0] = 21
[  923.370056][T27149] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:52 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a47008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

17:12:52 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
recvmsg$kcm(r1, 0x0, 0x40012083)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000140)={0x754, 0x1, 0x6})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

17:12:52 executing program 1 (fault-call:3 fault-nth:4):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  923.903306][T27168] FAULT_INJECTION: forcing a failure.
[  923.903306][T27168] name failslab, interval 1, probability 0, space 0, times 0
[  923.923812][T27170] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  923.966249][T27170] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  924.002945][T27168] CPU: 1 PID: 27168 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  924.012368][T27168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  924.022464][T27168] Call Trace:
[  924.025827][T27168]  dump_stack+0x197/0x210
[  924.030199][T27168]  should_fail.cold+0x5/0xd
[  924.034763][T27168]  ? fault_create_debugfs_attr+0x140/0x140
[  924.040595][T27168]  ? ___might_sleep+0x163/0x2c0
[  924.046159][T27168]  __should_failslab+0xb7/0x100
[  924.051151][T27168]  should_failslab+0x9/0x14
[  924.055660][T27168]  kmem_cache_alloc_trace+0x2d3/0x790
[  924.061224][T27168]  ? lock_downgrade+0x920/0x920
[  924.066101][T27168]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[  924.071999][T27168]  ? cma_comp_exch+0xac/0xd0
[  924.076617][T27168]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[  924.082453][T27168]  ? cma_alloc_port+0x1b0/0x1b0
[  924.087327][T27168]  __rdma_create_id+0x5e/0x870
[  924.092115][T27168]  cma_listen_on_dev+0x1cd/0x6a0
[  924.097080][T27168]  rdma_listen+0x772/0x970
[  924.101523][T27168]  ? _raw_spin_unlock+0x28/0x40
[  924.106398][T27168]  ucma_listen+0x14d/0x1c0
[  924.110858][T27168]  ? ucma_notify+0x190/0x190
[  924.115471][T27168]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  924.122261][T27168]  ? _copy_from_user+0x12c/0x1a0
[  924.127348][T27168]  ucma_write+0x2d7/0x3c0
[  924.131698][T27168]  ? ucma_notify+0x190/0x190
[  924.136302][T27168]  ? ucma_open+0x290/0x290
[  924.140754][T27168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  924.147026][T27168]  ? security_file_permission+0x8f/0x380
[  924.152839][T27168]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  924.158246][T27168]  __vfs_write+0x8a/0x110
[  924.162588][T27168]  ? ucma_open+0x290/0x290
[  924.167039][T27168]  vfs_write+0x268/0x5d0
[  924.171664][T27168]  ksys_write+0x220/0x290
[  924.176800][T27168]  ? __ia32_sys_read+0xb0/0xb0
[  924.181577][T27168]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  924.187049][T27168]  ? do_syscall_64+0x26/0x790
[  924.191742][T27168]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  924.197819][T27168]  ? do_syscall_64+0x26/0x790
[  924.202521][T27168]  __x64_sys_write+0x73/0xb0
[  924.207168][T27168]  do_syscall_64+0xfa/0x790
[  924.211707][T27168]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  924.217609][T27168] RIP: 0033:0x45c449
[  924.221512][T27168] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  924.241220][T27168] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  924.249695][T27168] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  924.257804][T27168] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  924.265914][T27168] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  924.273896][T27168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  924.281905][T27168] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000004
17:12:53 executing program 1 (fault-call:3 fault-nth:5):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

[  924.364117][T27180] IPVS: ftp: loaded support on port[0] = 21
[  924.454134][T27167] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  924.482579][T27182] FAULT_INJECTION: forcing a failure.
[  924.482579][T27182] name failslab, interval 1, probability 0, space 0, times 0
[  924.514784][T27187] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  924.520408][T27182] CPU: 0 PID: 27182 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  924.531576][T27182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  924.541647][T27182] Call Trace:
[  924.544959][T27182]  dump_stack+0x197/0x210
[  924.549333][T27182]  should_fail.cold+0x5/0xd
[  924.553346][T27187] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  924.553862][T27182]  ? fault_create_debugfs_attr+0x140/0x140
[  924.568959][T27182]  ? ___might_sleep+0x163/0x2c0
[  924.573839][T27182]  __should_failslab+0xb7/0x100
[  924.578716][T27182]  should_failslab+0x9/0x14
[  924.583239][T27182]  kmem_cache_alloc_trace+0x2d3/0x790
[  924.588626][T27182]  ? trace_hardirqs_on+0x67/0x240
[  924.593910][T27182]  ? cma_ib_req_handler+0x54e0/0x54e0
[  924.599298][T27182]  iw_create_cm_id+0x57/0x3a0
[  924.603995][T27182]  rdma_listen+0x48c/0x970
[  924.608425][T27182]  cma_listen_on_dev+0x530/0x6a0
[  924.613393][T27182]  rdma_listen+0x772/0x970
[  924.617827][T27182]  ? _raw_spin_unlock+0x28/0x40
[  924.622707][T27182]  ucma_listen+0x14d/0x1c0
[  924.627167][T27182]  ? ucma_notify+0x190/0x190
[  924.631772][T27182]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  924.638316][T27182]  ? _copy_from_user+0x12c/0x1a0
[  924.643299][T27182]  ucma_write+0x2d7/0x3c0
[  924.647640][T27182]  ? ucma_notify+0x190/0x190
[  924.652245][T27182]  ? ucma_open+0x290/0x290
[  924.656687][T27182]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  924.662949][T27182]  ? security_file_permission+0x8f/0x380
[  924.668589][T27182]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  924.673927][T27182]  __vfs_write+0x8a/0x110
[  924.678279][T27182]  ? ucma_open+0x290/0x290
[  924.682709][T27182]  vfs_write+0x268/0x5d0
[  924.687079][T27182]  ksys_write+0x220/0x290
[  924.691450][T27182]  ? __ia32_sys_read+0xb0/0xb0
[  924.696226][T27182]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  924.701706][T27182]  ? do_syscall_64+0x26/0x790
[  924.706403][T27182]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  924.712558][T27182]  ? do_syscall_64+0x26/0x790
[  924.717943][T27182]  __x64_sys_write+0x73/0xb0
[  924.722539][T27182]  do_syscall_64+0xfa/0x790
[  924.727069][T27182]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  924.733923][T27182] RIP: 0033:0x45c449
[  924.737837][T27182] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  924.757579][T27182] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  924.766005][T27182] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  924.773997][T27182] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  924.781984][T27182] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  924.789973][T27182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  924.798053][T27182] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000005
[  924.835899][T27182] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12
17:12:53 executing program 1 (fault-call:3 fault-nth:6):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  924.913953][T27179] IPVS: ftp: loaded support on port[0] = 21
[  925.026637][T27196] FAULT_INJECTION: forcing a failure.
[  925.026637][T27196] name failslab, interval 1, probability 0, space 0, times 0
[  925.040718][T27196] CPU: 0 PID: 27196 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  925.049419][T27196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  925.059596][T27196] Call Trace:
[  925.062953][T27196]  dump_stack+0x197/0x210
[  925.067329][T27196]  should_fail.cold+0x5/0xd
[  925.071873][T27196]  ? fault_create_debugfs_attr+0x140/0x140
[  925.077861][T27196]  ? is_bpf_image_address+0x1da/0x290
[  925.083274][T27196]  __should_failslab+0xb7/0x100
[  925.088141][T27196]  should_failslab+0x9/0x14
[  925.092662][T27196]  kmem_cache_alloc+0x47/0x710
[  925.098060][T27196]  ? error_exit+0xb/0x20
[  925.102333][T27196]  xas_alloc+0x346/0x460
[  925.106611][T27196]  xas_create+0x5b2/0x1060
[  925.111063][T27196]  xas_store+0x9a/0x1a00
[  925.115306][T27196]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  925.121035][T27196]  ? xas_find_marked+0x365/0xf00
[  925.126689][T27196]  ? __kasan_check_read+0x11/0x20
[  925.132343][T27196]  __xa_alloc+0x243/0x3b0
[  925.136706][T27196]  ? xas_find_marked+0xf00/0xf00
[  925.141670][T27196]  ? trace_hardirqs_on+0x67/0x240
[  925.146717][T27196]  ? mark_held_locks+0xf0/0xf0
[  925.151619][T27196]  __xa_alloc_cyclic+0x119/0x390
[  925.156604][T27196]  ? __xa_alloc+0x3b0/0x3b0
[  925.161172][T27196]  rdma_restrack_add+0x193/0x3f0
[  925.166124][T27196]  rdma_restrack_uadd+0x12b/0x160
[  925.171152][T27196]  _cma_attach_to_dev+0x25a/0x2f0
[  925.176322][T27196]  cma_listen_on_dev+0x252/0x6a0
[  925.181298][T27196]  rdma_listen+0x772/0x970
[  925.185735][T27196]  ? _raw_spin_unlock+0x28/0x40
[  925.190604][T27196]  ucma_listen+0x14d/0x1c0
[  925.195033][T27196]  ? ucma_notify+0x190/0x190
[  925.199631][T27196]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  925.205879][T27196]  ? _copy_from_user+0x12c/0x1a0
[  925.210840][T27196]  ucma_write+0x2d7/0x3c0
[  925.215189][T27196]  ? ucma_notify+0x190/0x190
[  925.219791][T27196]  ? ucma_open+0x290/0x290
[  925.224240][T27196]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  925.230520][T27196]  ? security_file_permission+0x8f/0x380
[  925.236182][T27196]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  925.241500][T27196]  __vfs_write+0x8a/0x110
[  925.245845][T27196]  ? ucma_open+0x290/0x290
[  925.250278][T27196]  vfs_write+0x268/0x5d0
[  925.254571][T27196]  ksys_write+0x220/0x290
[  925.258937][T27196]  ? __ia32_sys_read+0xb0/0xb0
[  925.263865][T27196]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  925.269344][T27196]  ? do_syscall_64+0x26/0x790
[  925.274032][T27196]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  925.280243][T27196]  ? do_syscall_64+0x26/0x790
[  925.284948][T27196]  __x64_sys_write+0x73/0xb0
[  925.289554][T27196]  do_syscall_64+0xfa/0x790
[  925.294076][T27196]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  925.299966][T27196] RIP: 0033:0x45c449
[  925.303862][T27196] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  925.323468][T27196] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  925.331891][T27196] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  925.339874][T27196] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  925.347858][T27196] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  925.356045][T27196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  925.364086][T27196] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000006
[  925.442989][T27196] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:54 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

17:12:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

17:12:54 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:54 executing program 1 (fault-call:3 fault-nth:7):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  926.019203][T27205] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  926.026757][T27208] FAULT_INJECTION: forcing a failure.
[  926.026757][T27208] name failslab, interval 1, probability 0, space 0, times 0
[  926.048902][T27208] CPU: 1 PID: 27208 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  926.057618][T27208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  926.067758][T27208] Call Trace:
[  926.071058][T27208]  dump_stack+0x197/0x210
[  926.075502][T27208]  should_fail.cold+0x5/0xd
[  926.080031][T27208]  ? fault_create_debugfs_attr+0x140/0x140
[  926.085850][T27208]  ? ___might_sleep+0x163/0x2c0
[  926.090707][T27208]  __should_failslab+0xb7/0x100
[  926.095556][T27208]  should_failslab+0x9/0x14
[  926.100065][T27208]  kmem_cache_alloc_trace+0x2d3/0x790
[  926.105448][T27208]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  926.111422][T27208]  alloc_work_entries+0xaf/0x240
[  926.116372][T27208]  iw_cm_listen+0x47/0x1f0
[  926.120801][T27208]  rdma_listen+0x613/0x970
[  926.125232][T27208]  cma_listen_on_dev+0x530/0x6a0
[  926.130178][T27208]  rdma_listen+0x772/0x970
[  926.134601][T27208]  ? _raw_spin_unlock+0x28/0x40
[  926.139452][T27208]  ucma_listen+0x14d/0x1c0
[  926.143860][T27208]  ? ucma_notify+0x190/0x190
[  926.148840][T27208]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  926.155077][T27208]  ? _copy_from_user+0x12c/0x1a0
[  926.160038][T27208]  ucma_write+0x2d7/0x3c0
[  926.164365][T27208]  ? ucma_notify+0x190/0x190
[  926.169091][T27208]  ? ucma_open+0x290/0x290
[  926.173516][T27208]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  926.179766][T27208]  ? security_file_permission+0x8f/0x380
[  926.185403][T27208]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  926.190698][T27208]  __vfs_write+0x8a/0x110
[  926.195037][T27208]  ? ucma_open+0x290/0x290
[  926.199467][T27208]  vfs_write+0x268/0x5d0
[  926.203716][T27208]  ksys_write+0x220/0x290
[  926.208060][T27208]  ? __ia32_sys_read+0xb0/0xb0
[  926.212836][T27208]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  926.218292][T27208]  ? do_syscall_64+0x26/0x790
[  926.222976][T27208]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  926.229058][T27208]  ? do_syscall_64+0x26/0x790
[  926.233759][T27208]  __x64_sys_write+0x73/0xb0
[  926.238361][T27208]  do_syscall_64+0xfa/0x790
[  926.242922][T27208]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  926.248825][T27208] RIP: 0033:0x45c449
[  926.252803][T27208] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  926.272637][T27208] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  926.281171][T27208] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  926.289146][T27208] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  926.297114][T27208] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  926.305285][T27208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  926.313283][T27208] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000007
[  926.333331][T27217] IPVS: ftp: loaded support on port[0] = 21
[  926.338943][T27208] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12
[  926.477076][T27212] IPVS: ftp: loaded support on port[0] = 21
17:12:55 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a48008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:55 executing program 1 (fault-call:3 fault-nth:8):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

17:12:55 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0))
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
dup(r3)
r4 = accept$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000140)=0x1c)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0xff, {{0xa, 0x72a0, 0xcf, @mcast2, 0x7fffffff}}, {{0xa, 0x4e23, 0x6, @remote, 0x1}}}, 0x108)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

[  926.989447][T27223] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
17:12:55 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  927.032693][T27223] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  927.044195][T27228] FAULT_INJECTION: forcing a failure.
[  927.044195][T27228] name failslab, interval 1, probability 0, space 0, times 0
[  927.096965][T27228] CPU: 0 PID: 27228 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  927.105694][T27228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  927.116561][T27228] Call Trace:
[  927.119875][T27228]  dump_stack+0x197/0x210
[  927.124258][T27228]  should_fail.cold+0x5/0xd
[  927.128805][T27228]  ? fault_create_debugfs_attr+0x140/0x140
[  927.134643][T27228]  ? ___might_sleep+0x163/0x2c0
[  927.139523][T27228]  __should_failslab+0xb7/0x100
[  927.144399][T27228]  should_failslab+0x9/0x14
[  927.149041][T27228]  kmem_cache_alloc_trace+0x2d3/0x790
[  927.154433][T27228]  ? trace_hardirqs_on+0x67/0x240
[  927.159857][T27228]  ? cma_ib_req_handler+0x54e0/0x54e0
[  927.165261][T27228]  iw_create_cm_id+0x57/0x3a0
[  927.169968][T27228]  rdma_listen+0x48c/0x970
[  927.174407][T27228]  cma_listen_on_dev+0x530/0x6a0
[  927.179389][T27228]  rdma_listen+0x772/0x970
[  927.183828][T27228]  ? _raw_spin_unlock+0x28/0x40
[  927.188708][T27228]  ucma_listen+0x14d/0x1c0
[  927.193163][T27228]  ? ucma_notify+0x190/0x190
[  927.197773][T27228]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  927.204127][T27228]  ? _copy_from_user+0x12c/0x1a0
[  927.209471][T27228]  ucma_write+0x2d7/0x3c0
[  927.213819][T27228]  ? ucma_notify+0x190/0x190
[  927.216229][T27242] IPVS: ftp: loaded support on port[0] = 21
[  927.218438][T27228]  ? ucma_open+0x290/0x290
[  927.218465][T27228]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  927.218483][T27228]  ? security_file_permission+0x8f/0x380
[  927.218507][T27228]  ? rcu_read_lock_bh_held+0xb0/0xb0
17:12:55 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:56 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  927.245995][T27228]  __vfs_write+0x8a/0x110
[  927.250437][T27228]  ? ucma_open+0x290/0x290
[  927.254875][T27228]  vfs_write+0x268/0x5d0
[  927.259284][T27228]  ksys_write+0x220/0x290
[  927.263743][T27228]  ? __ia32_sys_read+0xb0/0xb0
[  927.268529][T27228]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  927.274006][T27228]  ? do_syscall_64+0x26/0x790
[  927.278708][T27228]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  927.284798][T27228]  ? do_syscall_64+0x26/0x790
[  927.289656][T27228]  __x64_sys_write+0x73/0xb0
[  927.294263][T27228]  do_syscall_64+0xfa/0x790
[  927.298802][T27228]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  927.304710][T27228] RIP: 0033:0x45c449
[  927.308628][T27228] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  927.328417][T27228] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  927.336844][T27228] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  927.344829][T27228] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  927.352820][T27228] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  927.360805][T27228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  927.368789][T27228] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000008
[  927.386375][T27228] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12
[  927.405196][T27249] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  927.415519][T27249] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

17:12:56 executing program 1 (fault-call:3 fault-nth:9):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

[  927.504058][T27227] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  927.617897][T27254] FAULT_INJECTION: forcing a failure.
[  927.617897][T27254] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  927.631176][T27254] CPU: 1 PID: 27254 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  927.640111][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  927.650184][T27254] Call Trace:
[  927.653490][T27254]  dump_stack+0x197/0x210
[  927.657845][T27254]  should_fail.cold+0x5/0xd
[  927.662460][T27254]  ? __lock_acquire+0x8a0/0x4a00
[  927.667394][T27254]  ? fault_create_debugfs_attr+0x140/0x140
[  927.673422][T27254]  ? is_bpf_image_address+0x1b8/0x290
[  927.680200][T27254]  should_fail_alloc_page+0x50/0x60
[  927.685395][T27254]  __alloc_pages_nodemask+0x1a1/0x910
[  927.690784][T27254]  ? __alloc_pages_slowpath+0x2900/0x2900
[  927.696538][T27254]  ? __kasan_check_read+0x11/0x20
[  927.701585][T27254]  ? fault_create_debugfs_attr+0x140/0x140
[  927.707413][T27254]  cache_grow_begin+0x90/0xc60
[  927.712182][T27254]  ? trace_hardirqs_off+0x62/0x240
[  927.717360][T27254]  kmem_cache_alloc+0x64e/0x710
[  927.720092][T27235] IPVS: ftp: loaded support on port[0] = 21
[  927.722249][T27254]  ? arch_stack_walk+0x97/0xf0
[  927.722310][T27254]  xas_alloc+0x346/0x460
[  927.737479][T27254]  xas_create+0x5b2/0x1060
[  927.741941][T27254]  xas_store+0x9a/0x1a00
[  927.746206][T27254]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  927.751969][T27254]  ? xas_find_marked+0x365/0xf00
[  927.757086][T27254]  ? __kasan_check_read+0x11/0x20
[  927.762148][T27254]  __xa_alloc+0x243/0x3b0
[  927.766527][T27254]  ? xas_find_marked+0xf00/0xf00
[  927.771481][T27254]  ? trace_hardirqs_on+0x67/0x240
[  927.776643][T27254]  ? mark_held_locks+0xf0/0xf0
[  927.781435][T27254]  __xa_alloc_cyclic+0x119/0x390
[  927.786448][T27254]  ? __xa_alloc+0x3b0/0x3b0
[  927.790986][T27254]  rdma_restrack_add+0x193/0x3f0
[  927.795955][T27254]  rdma_restrack_uadd+0x12b/0x160
[  927.800992][T27254]  _cma_attach_to_dev+0x25a/0x2f0
[  927.806043][T27254]  cma_listen_on_dev+0x252/0x6a0
[  927.810998][T27254]  rdma_listen+0x772/0x970
[  927.815432][T27254]  ? _raw_spin_unlock+0x28/0x40
[  927.820308][T27254]  ucma_listen+0x14d/0x1c0
[  927.824746][T27254]  ? ucma_notify+0x190/0x190
[  927.829361][T27254]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  927.835617][T27254]  ? _copy_from_user+0x12c/0x1a0
[  927.840583][T27254]  ucma_write+0x2d7/0x3c0
[  927.844938][T27254]  ? ucma_notify+0x190/0x190
[  927.849560][T27254]  ? ucma_open+0x290/0x290
[  927.853999][T27254]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  927.860241][T27254]  ? security_file_permission+0x8f/0x380
[  927.865995][T27254]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  927.871303][T27254]  __vfs_write+0x8a/0x110
[  927.875650][T27254]  ? ucma_open+0x290/0x290
[  927.880085][T27254]  vfs_write+0x268/0x5d0
[  927.884450][T27254]  ksys_write+0x220/0x290
[  927.888783][T27254]  ? __ia32_sys_read+0xb0/0xb0
[  927.893575][T27254]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  927.899140][T27254]  ? do_syscall_64+0x26/0x790
[  927.903808][T27254]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  927.909865][T27254]  ? do_syscall_64+0x26/0x790
[  927.914682][T27254]  __x64_sys_write+0x73/0xb0
[  927.919425][T27254]  do_syscall_64+0xfa/0x790
[  927.923957][T27254]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  927.929845][T27254] RIP: 0033:0x45c449
[  927.933736][T27254] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  927.953464][T27254] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  927.961865][T27254] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  927.969822][T27254] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  927.977794][T27254] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  927.985756][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  927.993722][T27254] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000009
[  928.038873][T27254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:57 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a49008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

17:12:57 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_REJECT(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4)
unshare(0x40000000)

17:12:57 executing program 1 (fault-call:3 fault-nth:10):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

[  929.097670][T27271] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  929.111979][T27269] FAULT_INJECTION: forcing a failure.
[  929.111979][T27269] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  929.125215][T27269] CPU: 1 PID: 27269 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  929.133899][T27269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  929.145097][T27269] Call Trace:
[  929.148420][T27269]  dump_stack+0x197/0x210
[  929.152899][T27269]  should_fail.cold+0x5/0xd
[  929.157423][T27269]  ? xas_store+0x9a/0x1a00
[  929.161890][T27269]  ? fault_create_debugfs_attr+0x140/0x140
[  929.167758][T27269]  ? rdma_listen+0x772/0x970
[  929.172374][T27269]  ? ucma_listen+0x14d/0x1c0
[  929.176994][T27269]  ? ucma_write+0x2d7/0x3c0
[  929.181523][T27269]  ? __vfs_write+0x8a/0x110
[  929.185448][T27271] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  929.186163][T27269]  ? vfs_write+0x268/0x5d0
[  929.186179][T27269]  ? ksys_write+0x220/0x290
[  929.186194][T27269]  ? __x64_sys_write+0x73/0xb0
[  929.186217][T27269]  ? do_syscall_64+0xfa/0x790
[  929.213902][T27269]  should_fail_alloc_page+0x50/0x60
[  929.219120][T27269]  __alloc_pages_nodemask+0x1a1/0x910
[  929.224527][T27269]  ? __alloc_pages_slowpath+0x2900/0x2900
[  929.230251][T27269]  ? __kasan_check_read+0x11/0x20
[  929.235308][T27269]  ? fault_create_debugfs_attr+0x140/0x140
[  929.241455][T27269]  cache_grow_begin+0x90/0xc60
[  929.246283][T27269]  ? trace_hardirqs_off+0x62/0x240
[  929.251528][T27269]  kmem_cache_alloc+0x64e/0x710
[  929.256407][T27269]  xas_alloc+0x346/0x460
[  929.260659][T27269]  xas_create+0x2cd/0x1060
[  929.265130][T27269]  xas_store+0x9a/0x1a00
[  929.269390][T27269]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  929.275917][T27269]  ? xas_find_marked+0x365/0xf00
[  929.280866][T27269]  ? __kasan_check_read+0x11/0x20
[  929.286015][T27269]  __xa_alloc+0x243/0x3b0
[  929.290388][T27269]  ? xas_find_marked+0xf00/0xf00
[  929.295335][T27269]  ? trace_hardirqs_on+0x67/0x240
[  929.300403][T27269]  ? mark_held_locks+0xf0/0xf0
[  929.305236][T27269]  __xa_alloc_cyclic+0x119/0x390
[  929.310208][T27269]  ? __xa_alloc+0x3b0/0x3b0
[  929.314751][T27269]  rdma_restrack_add+0x193/0x3f0
[  929.319731][T27269]  rdma_restrack_uadd+0x12b/0x160
[  929.324764][T27269]  _cma_attach_to_dev+0x25a/0x2f0
[  929.329831][T27269]  cma_listen_on_dev+0x252/0x6a0
[  929.334781][T27269]  rdma_listen+0x772/0x970
[  929.339322][T27269]  ? _raw_spin_unlock+0x28/0x40
[  929.344237][T27269]  ucma_listen+0x14d/0x1c0
[  929.348679][T27269]  ? ucma_notify+0x190/0x190
[  929.353289][T27269]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  929.359560][T27269]  ? _copy_from_user+0x12c/0x1a0
[  929.364532][T27269]  ucma_write+0x2d7/0x3c0
[  929.368878][T27269]  ? ucma_notify+0x190/0x190
[  929.373493][T27269]  ? ucma_open+0x290/0x290
[  929.377922][T27269]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  929.384180][T27269]  ? security_file_permission+0x8f/0x380
[  929.389835][T27269]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  929.395149][T27269]  __vfs_write+0x8a/0x110
[  929.399480][T27269]  ? ucma_open+0x290/0x290
[  929.403918][T27269]  vfs_write+0x268/0x5d0
[  929.408226][T27269]  ksys_write+0x220/0x290
[  929.412599][T27269]  ? __ia32_sys_read+0xb0/0xb0
[  929.417383][T27269]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  929.422847][T27269]  ? do_syscall_64+0x26/0x790
[  929.431936][T27269]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  929.438255][T27269]  ? do_syscall_64+0x26/0x790
[  929.442951][T27269]  __x64_sys_write+0x73/0xb0
[  929.447549][T27269]  do_syscall_64+0xfa/0x790
[  929.452255][T27269]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  929.458222][T27269] RIP: 0033:0x45c449
[  929.462134][T27269] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  929.481946][T27269] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  929.490378][T27269] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  929.498639][T27269] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  929.506622][T27269] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  929.514598][T27269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  929.522600][T27269] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000a
[  929.566084][T27269] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
[  929.590022][T27278] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  929.603231][T27264] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19
17:12:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

[  929.624452][T27279] IPVS: ftp: loaded support on port[0] = 21
[  929.632692][T27278] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
17:12:58 executing program 1 (fault-call:3 fault-nth:11):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)

17:12:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a4a008003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[  929.853465][T27287] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  929.882499][T27286] FAULT_INJECTION: forcing a failure.
[  929.882499][T27286] name failslab, interval 1, probability 0, space 0, times 0
[  929.904483][T27287] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  929.906961][T27286] CPU: 0 PID: 27286 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  929.922606][T27286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  929.930973][T27292] IPVS: ftp: loaded support on port[0] = 21
[  929.932661][T27286] Call Trace:
[  929.932692][T27286]  dump_stack+0x197/0x210
[  929.932730][T27286]  should_fail.cold+0x5/0xd
[  929.950757][T27286]  ? fault_create_debugfs_attr+0x140/0x140
[  929.956591][T27286]  ? ___might_sleep+0x163/0x2c0
[  929.961473][T27286]  __should_failslab+0xb7/0x100
[  929.966346][T27286]  should_failslab+0x9/0x14
[  929.970856][T27286]  kmem_cache_alloc_trace+0x2d3/0x790
[  929.976250][T27286]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  929.982087][T27286]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  929.988771][T27286]  ? put_work+0x126/0x180
[  929.993108][T27286]  alloc_work_entries+0xaf/0x240
[  929.998176][T27286]  iw_cm_listen+0x47/0x1f0
[  930.002612][T27286]  rdma_listen+0x613/0x970
[  930.007068][T27286]  cma_listen_on_dev+0x530/0x6a0
[  930.012043][T27286]  rdma_listen+0x772/0x970
[  930.016466][T27286]  ? _raw_spin_unlock+0x28/0x40
[  930.021336][T27286]  ucma_listen+0x14d/0x1c0
[  930.025783][T27286]  ? ucma_notify+0x190/0x190
[  930.030394][T27286]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  930.036637][T27286]  ? _copy_from_user+0x12c/0x1a0
[  930.041608][T27286]  ucma_write+0x2d7/0x3c0
[  930.046054][T27286]  ? ucma_notify+0x190/0x190
[  930.050696][T27286]  ? ucma_open+0x290/0x290
[  930.055156][T27286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  930.061430][T27286]  ? security_file_permission+0x8f/0x380
[  930.067233][T27286]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  930.072550][T27286]  __vfs_write+0x8a/0x110
[  930.076899][T27286]  ? ucma_open+0x290/0x290
[  930.081751][T27286]  vfs_write+0x268/0x5d0
[  930.086034][T27286]  ksys_write+0x220/0x290
[  930.090373][T27286]  ? __ia32_sys_read+0xb0/0xb0
[  930.095157][T27286]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  930.101162][T27286]  ? do_syscall_64+0x26/0x790
[  930.105842][T27286]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  930.111974][T27286]  ? do_syscall_64+0x26/0x790
[  930.116715][T27286]  __x64_sys_write+0x73/0xb0
[  930.121331][T27286]  do_syscall_64+0xfa/0x790
[  930.125889][T27286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  930.131793][T27286] RIP: 0033:0x45c449
[  930.135698][T27286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  930.155318][T27286] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  930.163735][T27286] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  930.171866][T27286] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  930.179837][T27286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  930.188054][T27286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  930.196174][T27286] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000b
[  930.224718][T27286] ==================================================================
[  930.233453][T27286] BUG: KASAN: use-after-free in iwcm_deref_id+0x1d3/0x1e0
[  930.240684][T27286] Read of size 8 at addr ffff888016c1ed78 by task syz-executor.1/27286
[  930.248924][T27286] 
[  930.251270][T27286] CPU: 0 PID: 27286 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0
[  930.260100][T27286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  930.270380][T27286] Call Trace:
[  930.273690][T27286]  dump_stack+0x197/0x210
[  930.278046][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.282844][T27286]  print_address_description.constprop.0.cold+0xd4/0x30b
[  930.289889][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.295039][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.299832][T27286]  __kasan_report.cold+0x1b/0x32
[  930.304799][T27286]  ? destroy_cm_id+0x1b0/0x540
[  930.309579][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.314378][T27286]  kasan_report+0x12/0x20
[  930.318729][T27286]  __asan_report_load8_noabort+0x14/0x20
[  930.324381][T27286]  iwcm_deref_id+0x1d3/0x1e0
[  930.329007][T27286]  destroy_cm_id+0x27c/0x540
[  930.333710][T27286]  ? rem_ref+0x20/0x20
[  930.337824][T27286]  ? alloc_work_entries+0x12a/0x240
[  930.343084][T27286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  930.349448][T27286]  iw_destroy_cm_id+0x16/0x20
[  930.354190][T27286]  rdma_listen+0x656/0x970
[  930.358636][T27286]  cma_listen_on_dev+0x530/0x6a0
[  930.363643][T27286]  rdma_listen+0x772/0x970
[  930.368081][T27286]  ? _raw_spin_unlock+0x28/0x40
[  930.372958][T27286]  ucma_listen+0x14d/0x1c0
[  930.377391][T27286]  ? ucma_notify+0x190/0x190
[  930.382170][T27286]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  930.388430][T27286]  ? _copy_from_user+0x12c/0x1a0
[  930.393397][T27286]  ucma_write+0x2d7/0x3c0
[  930.397767][T27286]  ? ucma_notify+0x190/0x190
[  930.402384][T27286]  ? ucma_open+0x290/0x290
[  930.406827][T27286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  930.414060][T27286]  ? security_file_permission+0x8f/0x380
[  930.419725][T27286]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  930.425130][T27286]  __vfs_write+0x8a/0x110
[  930.429484][T27286]  ? ucma_open+0x290/0x290
[  930.433932][T27286]  vfs_write+0x268/0x5d0
[  930.438211][T27286]  ksys_write+0x220/0x290
[  930.442640][T27286]  ? __ia32_sys_read+0xb0/0xb0
[  930.447445][T27286]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  930.452924][T27286]  ? do_syscall_64+0x26/0x790
[  930.457804][T27286]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  930.463911][T27286]  ? do_syscall_64+0x26/0x790
[  930.468616][T27286]  __x64_sys_write+0x73/0xb0
17:12:59 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:12:59 executing program 2:
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xa30000, 0x8, 0x0, <r0=>0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0908, 0xf, [], @string=&(0x7f00000000c0)=0x3}})
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x5)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x1ff, 0x109b, 0x1f61, 0xbe, 0x5})
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

[  930.473417][T27286]  do_syscall_64+0xfa/0x790
[  930.477953][T27286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  930.483859][T27286] RIP: 0033:0x45c449
[  930.487767][T27286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  930.507378][T27286] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  930.515810][T27286] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  930.523913][T27286] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  930.531888][T27286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  930.540013][T27286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  930.548018][T27286] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000b
[  930.556014][T27286] 
[  930.558410][T27286] Allocated by task 27286:
[  930.562832][T27286]  save_stack+0x23/0x90
[  930.567043][T27286]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[  930.572784][T27286]  kasan_kmalloc+0x9/0x10
[  930.577129][T27286]  kmem_cache_alloc_trace+0x158/0x790
[  930.582601][T27286]  alloc_work_entries+0xaf/0x240
[  930.587773][T27286]  iw_cm_listen+0x47/0x1f0
[  930.592211][T27286]  rdma_listen+0x613/0x970
[  930.596774][T27286]  cma_listen_on_dev+0x530/0x6a0
[  930.601714][T27286]  rdma_listen+0x772/0x970
[  930.606142][T27286]  ucma_listen+0x14d/0x1c0
[  930.610597][T27286]  ucma_write+0x2d7/0x3c0
[  930.614927][T27286]  __vfs_write+0x8a/0x110
[  930.619398][T27286]  vfs_write+0x268/0x5d0
[  930.623651][T27286]  ksys_write+0x220/0x290
[  930.627990][T27286]  __x64_sys_write+0x73/0xb0
[  930.632595][T27286]  do_syscall_64+0xfa/0x790
[  930.636247][T27303] IPVS: ftp: loaded support on port[0] = 21
[  930.637106][T27286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  930.637137][T27286] 
[  930.637145][T27286] Freed by task 27286:
[  930.637161][T27286]  save_stack+0x23/0x90
[  930.637175][T27286]  __kasan_slab_free+0x102/0x150
[  930.637188][T27286]  kasan_slab_free+0xe/0x10
[  930.637199][T27286]  kfree+0x10a/0x2c0
[  930.637221][T27286]  alloc_work_entries+0x1e6/0x240
[  930.678073][T27286]  iw_cm_listen+0x47/0x1f0
[  930.682612][T27286]  rdma_listen+0x613/0x970
[  930.687043][T27286]  cma_listen_on_dev+0x530/0x6a0
[  930.691997][T27286]  rdma_listen+0x772/0x970
[  930.696421][T27286]  ucma_listen+0x14d/0x1c0
[  930.700858][T27286]  ucma_write+0x2d7/0x3c0
[  930.705205][T27286]  __vfs_write+0x8a/0x110
[  930.709667][T27286]  vfs_write+0x268/0x5d0
[  930.713923][T27286]  ksys_write+0x220/0x290
[  930.718281][T27286]  __x64_sys_write+0x73/0xb0
[  930.723042][T27286]  do_syscall_64+0xfa/0x790
[  930.727617][T27286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  930.733618][T27286] 
[  930.735963][T27286] The buggy address belongs to the object at ffff888016c1ec00
[  930.735963][T27286]  which belongs to the cache kmalloc-512 of size 512
[  930.750152][T27286] The buggy address is located 376 bytes inside of
[  930.750152][T27286]  512-byte region [ffff888016c1ec00, ffff888016c1ee00)
[  930.763538][T27286] The buggy address belongs to the page:
[  930.769276][T27286] page:ffffea00005b0780 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0
[  930.778577][T27286] flags: 0xfffe0000000200(slab)
[  930.783450][T27286] raw: 00fffe0000000200 ffffea000246b548 ffffea0000503048 ffff8880aa400a80
[  930.792562][T27286] raw: 0000000000000000 ffff888016c1e000 0000000100000004 0000000000000000
[  930.801262][T27286] page dumped because: kasan: bad access detected
[  930.807680][T27286] 
[  930.810040][T27286] Memory state around the buggy address:
[  930.815727][T27286]  ffff888016c1ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  930.823874][T27286]  ffff888016c1ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  930.832061][T27286] >ffff888016c1ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  930.840239][T27286]                                                                 ^
[  930.848227][T27286]  ffff888016c1ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  930.856411][T27286]  ffff888016c1ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  930.864524][T27286] ==================================================================
[  930.872592][T27286] Disabling lock debugging due to kernel taint
[  930.880267][T27286] Kernel panic - not syncing: panic_on_warn set ...
[  930.886907][T27286] CPU: 1 PID: 27286 Comm: syz-executor.1 Tainted: G    B             5.6.0-rc3-syzkaller #0
[  930.896975][T27286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  930.907240][T27286] Call Trace:
[  930.910528][T27286]  dump_stack+0x197/0x210
[  930.914889][T27286]  panic+0x2e3/0x75c
[  930.918770][T27286]  ? add_taint.cold+0x16/0x16
[  930.923720][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.928578][T27286]  ? preempt_schedule+0x4b/0x60
[  930.933418][T27286]  ? ___preempt_schedule+0x16/0x18
[  930.938525][T27286]  ? trace_hardirqs_on+0x5e/0x240
[  930.943551][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.948462][T27286]  end_report+0x47/0x4f
[  930.952618][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.957386][T27286]  __kasan_report.cold+0xe/0x32
[  930.962229][T27286]  ? destroy_cm_id+0x1b0/0x540
[  930.966983][T27286]  ? iwcm_deref_id+0x1d3/0x1e0
[  930.971750][T27286]  kasan_report+0x12/0x20
[  930.976069][T27286]  __asan_report_load8_noabort+0x14/0x20
[  930.981709][T27286]  iwcm_deref_id+0x1d3/0x1e0
[  930.986436][T27286]  destroy_cm_id+0x27c/0x540
[  930.991075][T27286]  ? rem_ref+0x20/0x20
[  930.995349][T27286]  ? alloc_work_entries+0x12a/0x240
[  931.000640][T27286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  931.006890][T27286]  iw_destroy_cm_id+0x16/0x20
[  931.011624][T27286]  rdma_listen+0x656/0x970
[  931.016064][T27286]  cma_listen_on_dev+0x530/0x6a0
[  931.021037][T27286]  rdma_listen+0x772/0x970
[  931.025487][T27286]  ? _raw_spin_unlock+0x28/0x40
[  931.030432][T27286]  ucma_listen+0x14d/0x1c0
[  931.034831][T27286]  ? ucma_notify+0x190/0x190
[  931.039532][T27286]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  931.045761][T27286]  ? _copy_from_user+0x12c/0x1a0
[  931.050694][T27286]  ucma_write+0x2d7/0x3c0
[  931.055053][T27286]  ? ucma_notify+0x190/0x190
[  931.059820][T27286]  ? ucma_open+0x290/0x290
[  931.064252][T27286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  931.070479][T27286]  ? security_file_permission+0x8f/0x380
[  931.076114][T27286]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  931.081600][T27286]  __vfs_write+0x8a/0x110
[  931.085933][T27286]  ? ucma_open+0x290/0x290
[  931.090349][T27286]  vfs_write+0x268/0x5d0
[  931.094673][T27286]  ksys_write+0x220/0x290
[  931.098996][T27286]  ? __ia32_sys_read+0xb0/0xb0
[  931.103886][T27286]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  931.109339][T27286]  ? do_syscall_64+0x26/0x790
[  931.114004][T27286]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  931.120214][T27286]  ? do_syscall_64+0x26/0x790
[  931.124885][T27286]  __x64_sys_write+0x73/0xb0
[  931.129488][T27286]  do_syscall_64+0xfa/0x790
[  931.134117][T27286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  931.140008][T27286] RIP: 0033:0x45c449
[  931.143887][T27286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  931.163496][T27286] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  931.172025][T27286] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449
[  931.180113][T27286] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003
[  931.188223][T27286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  931.196453][T27286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  931.204411][T27286] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000b
[  931.214552][T27286] Kernel Offset: disabled
[  931.219283][T27286] Rebooting in 86400 seconds..