0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/22) [ 719.277900][ T26] audit: type=1804 audit(1582736968.105:3890): pid=23247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir599649466/syzkaller.c7xmnM/498/bus" dev="sda1" ino=16534 res=1 17:09:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x06\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:09:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 17:09:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024025000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup3(r4, r1, 0x0) 17:09:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r0) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000040)=""/82, 0x52}], 0x1) r6 = dup3(r5, r3, 0x80000) ioctl$RTC_WIE_ON(r6, 0x700f) [ 719.660610][T23269] __nla_validate_parse: 2 callbacks suppressed [ 719.660623][T23269] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 719.852999][T23282] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:29 executing program 3: add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) madvise(&(0x7f00004a6000/0xe000)=nil, 0xe000, 0xc) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000c1fc9400017c7fa7adb18e0c37b285dfde222b981ec75432ff53997f22c02edc1f65b0e5f83bc10f4bff08ac4eb505a9d8a91fda0986d1cd0bc83073c8e6aac034ffc094613fdb43e877af7de5a8a134e5304e4d3989567d2f61e776c3383180ed8d83eb838769a7870dfe404909b1eb5df465166f5afdd79b48f48e7a67b9ce7fb726dbc144ab7fe76e5dc5c18b893d1df6b91a42e6a5cdb6f3f59c1596846e9a0d", @ANYRES16=r4, @ANYBLOB="843403d018a0bea2bd27dd109a3dd731b049be1cb9cdb438d9fc8d9571b05f345a59ea92c7751fe92549cd97a796019dade07850ffa50e744ef5d0bb617a6b8b013c57cc6ff0ead914403915b0739506d10c9855d8"], 0x3}, 0x1, 0x0, 0x0, 0xc850}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setpgid(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:09:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0xa0503, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 17:09:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) pipe(&(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 17:09:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024035000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:29 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000100)="12cb96df", 0x4) write$FUSE_POLL(r1, &(0x7f00000001c0)={0x18}, 0x18) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0701"], 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 720.284753][T23296] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:29 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24020, &(0x7f0000000040)={[{@nolazytime='nolazytime'}]}) 17:09:29 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = epoll_create1(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$packet(0x11, 0x0, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '}'}}, 0x22) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20002004}) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x501181, 0x0) 17:09:29 executing program 2: fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @vsock={0x28, 0x0, 0x2711, @host}, @nl=@unspec, @in={0x2, 0x4e20}, 0x4e4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_to_bond\x00', 0xf2b, 0x2, 0x7}) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000080)={0x800}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/vlan/config\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x300) [ 720.412169][T23304] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024050000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 720.785920][T23326] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 720.828346][T23311] EXT4-fs (sda1): re-mounted. Opts: nolazytime, [ 720.899267][T23327] EXT4-fs (sda1): re-mounted. Opts: nolazytime, [ 720.967047][T23332] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x106}}], 0x400000000000107, 0x0) shutdown(0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:09:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002405a000200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) pipe(&(0x7f0000000140)) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 17:09:30 executing program 3: add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) madvise(&(0x7f00004a6000/0xe000)=nil, 0xe000, 0xc) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setpgid(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:09:30 executing program 0: creat(&(0x7f0000000500)='./bus\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000001) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000551000/0x3000)=nil, 0x3000) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000100)=""/8, 0x8) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44) fdatasync(r0) 17:09:30 executing program 1: socket(0x10, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@loopback}, 0x14) r1 = dup(0xffffffffffffffff) ioctl$TIOCSIG(r1, 0x40045436, 0x25) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$KDSKBLED(r3, 0x4b65, 0x0) fcntl$setpipe(r2, 0x407, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x84, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4044014) [ 721.314954][T23343] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:30 executing program 5: epoll_create1(0x0) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:09:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) [ 721.484686][T23354] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024045010200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12"]}) 17:09:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$alg(r1, &(0x7f0000000400)=""/123, 0x7b) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 722.078014][T23375] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.243260][T23382] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc601000024052300200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x60000, 0x0) 17:09:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) 17:09:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8001) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) getpgid(0x0) socket$nl_audit(0x10, 0x3, 0x9) [ 722.837062][ T26] audit: type=1804 audit(1582736971.665:3891): pid=23400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir664155801/syzkaller.qDXO5T/511/bus" dev="sda1" ino=16533 res=1 17:09:31 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = epoll_create1(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$packet(0x11, 0x0, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '}'}}, 0x22) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x501181, 0x0) 17:09:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a020000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 17:09:31 executing program 2: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 17:09:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000011c0)={0x14, r1, 0x525}, 0x14}}, 0x0) 17:09:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a040000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 723.467306][T23423] selinux_netlink_send: 20 callbacks suppressed [ 723.467330][T23423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=23423 comm=syz-executor.0 17:09:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x25}]}, 0x40}}, 0x0) [ 723.507097][T23425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=23425 comm=syz-executor.0 17:09:32 executing program 0: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x0) [ 723.659161][ T26] audit: type=1804 audit(1582736972.465:3892): pid=23406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir664155801/syzkaller.qDXO5T/511/bus" dev="sda1" ino=16533 res=1 17:09:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20}, 0x20) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000090020000c80007000000000000000000c800000060010000f8010000f8010000f8010000f8010000f801000004000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000a07600000000000000000000000000000000000000000000000000a000c8000000010000000000000000000000000000000000300061646472747970650000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac1414bb000000000000000067726430000000000000000000000000000000000000000000000000000000ca00000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028005345540000000000000000000000000000000000000000000000000000010000030000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000005000000000000000000000000000000feffffff"], 0x1) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 17:09:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f7284b2b5d2f2fba401a80af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a74a75d00008489ef3932c2c66566a55fd4caa85307000065090021b173c73f15984fdd5bd24e99cd40e6b02b7dcd2809000000000000005b8c8900000000000000001e000000000076c8a25a49232aaf59c0ac967980100b6c62b21b25bbe49e99cdea2faee3ac9bb13b505a6aa021f927f688cffd397d85ea504f11e89478f72a7b0e42371f6575832b76f7a2bd0e84da311488592e96549d36c73298523593b74e571394064bc630a664ea9dd5f0998fc02903937e7c3f6306c60c2c09a08fcdce73", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:09:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a080000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 723.842080][ T26] audit: type=1804 audit(1582736972.465:3893): pid=23428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir664155801/syzkaller.qDXO5T/511/bus" dev="sda1" ino=16533 res=1 17:09:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 17:09:32 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 723.961544][T23445] x_tables: duplicate underflow at hook 2 17:09:32 executing program 3: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000180)='./file2\x00') 17:09:33 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x2c4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='ns/pid_for_children\x00', 0x0) 17:09:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400ab00000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000000114000400fe8000000000000000000000000000bb0c000200050001002f000000240002000c000200050001002f00040014000100080001000000000008000200e000000108000700000000003204f5c38635772ab63af533c79846c8965728fcbcd0a384dbea38ea2d4e6750d6a5557e1a801a936944fa59d9f0ebfcb5613d7b6e60e977e850382924133fbcfd97ca8e1f9362f0c6c039378f81a81061e5e3"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x1c, 0x2, 0x1, 0x80b, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:09:33 executing program 0: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/73, 0x3d}, {0x0}], 0x4d}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r1, 0x0) 17:09:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x25}]}, 0x40}}, 0x0) 17:09:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a020200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/248, 0xf8}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0079d) shutdown(r0, 0x0) shutdown(r1, 0x0) [ 724.872399][T23491] __nla_validate_parse: 10 callbacks suppressed [ 724.872412][T23491] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.002709][T23497] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:35 executing program 1: 17:09:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005ae) shutdown(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r1, 0x0) 17:09:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff94, 0x0, 0x0, 0x800e00526) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:09:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/254, 0xfe}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/73, 0x3d}, {0x0}], 0x4d}, 0x0) recvfrom$inet(r4, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:09:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a030200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:35 executing program 3: semget(0x0, 0x7, 0x390) 17:09:35 executing program 3: [ 726.943633][T23515] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:35 executing program 2: 17:09:35 executing program 1: [ 727.032037][T23523] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:36 executing program 5: 17:09:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a040200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/164, 0xa4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) shutdown(r0, 0x0) r2 = dup(r1) shutdown(r2, 0x0) 17:09:36 executing program 2: 17:09:36 executing program 0: 17:09:36 executing program 1: 17:09:36 executing program 5: [ 727.477811][T23544] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:36 executing program 1: 17:09:36 executing program 2: 17:09:36 executing program 0: 17:09:36 executing program 3: [ 727.626974][T23550] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:36 executing program 1: 17:09:36 executing program 5: 17:09:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a050200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:36 executing program 2: 17:09:36 executing program 0: 17:09:36 executing program 3: 17:09:36 executing program 1: 17:09:36 executing program 2: [ 728.063687][T23567] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:37 executing program 0: 17:09:37 executing program 5: 17:09:37 executing program 3: 17:09:37 executing program 1: [ 728.300791][T23575] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:37 executing program 2: 17:09:37 executing program 0: 17:09:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a060200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:37 executing program 3: 17:09:37 executing program 5: 17:09:37 executing program 2: 17:09:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000180)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$selinux_validatetrans(r1, &(0x7f00000000c0)={'system_u:object_r:ssh_keygen_exec_t:s0', 0x20, 'system_u:object_r:watchdog_device_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 17:09:37 executing program 0: [ 728.718620][T23591] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:37 executing program 3: 17:09:37 executing program 5: [ 728.872819][T23597] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:37 executing program 2: 17:09:37 executing program 0: 17:09:37 executing program 1: 17:09:37 executing program 3: 17:09:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a070200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:37 executing program 5: 17:09:38 executing program 2: 17:09:38 executing program 0: 17:09:38 executing program 1: 17:09:38 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f15b9409b0d1b849ac00200a57802", 0x15, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a86, 0x0, 0x0, 0x4b6ae4f95a5de35b) 17:09:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x100, 0xcc) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 17:09:38 executing program 2: 17:09:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a090200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:38 executing program 1: 17:09:38 executing program 0: 17:09:38 executing program 5: 17:09:38 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d2f09ff060000000000001c00"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000029008b8501efe5da7000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 17:09:38 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010300000100000000000000800005000100070000001c0007800c00028008000140ac1414000c00018008000140a51e00010900020073797a32"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 729.891324][T23640] __nla_validate_parse: 4 callbacks suppressed [ 729.891338][T23640] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000020c0)=ANY=[@ANYBLOB="304c00002c00050600"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x4c30}}, 0x4000) r2 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0) 17:09:38 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d2f09ff060000000000001c00"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2400000029008b8501efe5da7000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 17:09:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x9b) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="84", 0x1, 0x200400d4, 0x0, 0x0) [ 730.082494][T23646] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x15, 0x0, "300b648d8f65a58f71ab3656ab6b5a0a6ac88cb0cfe5f70846c6a14bd7e9fbcae83f357d81d3aa37a09143458175df6d267586a69d334f62a96cd14d41c35ab916590d91497299000f23a06e7b52bae0"}, 0xd8) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 17:09:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0a0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x6) dup3(r1, r0, 0x0) 17:09:39 executing program 1: perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) dup3(0xffffffffffffffff, r0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:09:39 executing program 0: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000003000000000000000000008d30616fcb37be5381864dd584209f8f381851038ffed5de38739538a9f71673ecd64140807da7c47303f852259e368c4d88b628b4fd2acfe534c8bd5b0d462754d5"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144}, 0x48) [ 730.432057][T23667] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:39 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 730.594205][T23678] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:39 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="5669033df23e5fb32245173a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 17:09:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b40)=0x2, 0x1) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005a00)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/230, 0xe6) 17:09:39 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:09:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0e0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:39 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) [ 731.093086][T23698] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:09:40 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 731.212872][T23703] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="8e0ef0679b72fa4509afe21688d01aeeb07f27de1b4b29f69b334a", 0x1b}], 0x1) 17:09:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0f0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:40 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:09:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="5669033df23e5fb32245173a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 17:09:40 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xa198) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="000000000000000004000d000000050035000300000005003500010000000500370001000000"], 0x3}, 0x1, 0x0, 0x0, 0x8c}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e1eba000000012e0b3836005404b0301a4ce8b7679500800000000000000101013c5811039e15775027ec8f66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2a95400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @xdp, @l2tp={0x2, 0x0, @loopback}, @in={0x2, 0x0, @local}, 0x3, 0x0, 0x0, 0x0, 0x7ea, 0x0, 0xf7, 0x0, 0xfff}) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20480, 0xb) 17:09:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040), 0x4) 17:09:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) [ 731.679838][T23723] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 731.812345][T23733] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 17:09:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a480200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:40 executing program 3: write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 732.155550][T23753] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = socket(0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0) syz_open_procfs(0x0, 0x0) [ 732.278283][T23758] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a4c0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 17:09:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 17:09:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8204) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x40001) creat(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) 17:09:41 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400) write$rfkill(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = open(0x0, 0x8001141042, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) ftruncate(r3, 0x0) sendfile(r1, r3, 0x0, 0x8482) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 17:09:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:09:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a500200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:43 executing program 3: clone(0x802102901ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000480200000000000000000000d8000000d800000000000000b0010000b0010000b0010000b0010000b001000003000000000000000000000000000000ac1414aa00000000000000007866726d30000000000000000000000062d462975b1e31be6400000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000007000d800000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d800000000000000000000000000007d01f38500000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000008000000000002800000000000000000000000000000000000100000002000000000000000004feffffff"], 0x1) r1 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 17:09:43 executing program 5: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) 17:09:43 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x10a0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:09:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a600200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:43 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/90, 0x5a}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) [ 735.010600][T23808] No such timeout policy "syz1" 17:09:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 735.099361][T23814] __nla_validate_parse: 4 callbacks suppressed [ 735.099372][T23814] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:09:44 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) 17:09:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ppoll(&(0x7f00000024c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 735.285518][T23825] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38c6417742e79943d5d052fcb6b7eedb310194e73efeae2ebe52d9000000009922df930aaa9f657a6705dd1306344fca35147769094bf67464a3b18d91af811f70ca20feac658b0d107fe0faca0491f154dc3745fd46405f9f8963d152783fd58dcac7392590d50300a3bbcc09543082eee252a343d4f008aaba4dd21af63886e0119cb127e31a978263eebc91d6fddb613c964fec09b006b2a9", 0x35ac}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccec280f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000000) 17:09:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a680200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 735.639822][T23844] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 735.701918][T23846] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:47 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400) write$rfkill(r0, &(0x7f0000000140)={0x9, 0x4}, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)) inotify_init1(0x80000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0) r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) ftruncate(r4, 0x2007fff) sendfile(r1, r4, 0x0, 0x8482) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000300)='\x00', 0xa) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) 17:09:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 17:09:47 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x8}}, 0x50) 17:09:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a6c0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:47 executing program 3: [ 738.304225][T23862] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:47 executing program 1: [ 738.351300][T23864] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 738.383686][T23865] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:47 executing program 3: 17:09:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a740200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:47 executing program 1: 17:09:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 738.757403][T23875] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 738.886472][T23878] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 17:09:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a7a0200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:50 executing program 3: 17:09:50 executing program 1: 17:09:50 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400) write$rfkill(r0, &(0x7f0000000140)={0x9, 0x4}, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)) inotify_init1(0x80000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0) r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) ftruncate(r4, 0x2007fff) sendfile(r1, r4, 0x0, 0x8482) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000300)='\x00', 0xa) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) 17:09:50 executing program 5: [ 741.330177][T23897] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:50 executing program 5: 17:09:50 executing program 1: 17:09:50 executing program 3: [ 741.471872][T23907] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:50 executing program 5: 17:09:50 executing program 1: 17:09:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400aa20200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 741.875204][T23916] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.967899][T23920] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:53 executing program 3: 17:09:53 executing program 5: 17:09:53 executing program 1: 17:09:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400ab00200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:53 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40400) write$rfkill(r0, &(0x7f0000000140)={0x9, 0x4}, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)) inotify_init1(0x80000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0) r6 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) ftruncate(r4, 0x2007fff) sendfile(r1, r4, 0x0, 0x8482) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000300)='\x00', 0xa) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2012}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) [ 744.416709][T23926] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:53 executing program 1: 17:09:53 executing program 3: 17:09:53 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(r0, r1, &(0x7f0000000240)=0x9b02, 0x4000000000dc) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) [ 744.541177][T23935] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 17:09:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000300053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) 17:09:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a280930206000035000001020b00000a0004003500280014000000190005407fffffff6022de1338d54400009b84136ef75afb83de4411001600c43ab82200"/85, 0x55}], 0x1}, 0x0) [ 744.985154][T23951] validate_nla: 6 callbacks suppressed [ 744.985165][T23951] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 745.027855][T23951] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 745.048995][T23951] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 745.071004][ T26] audit: type=1804 audit(1582736993.905:3894): pid=23955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir075261000/syzkaller.rYsf9h/401/bus" dev="sda1" ino=17100 res=1 [ 745.138684][T23958] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 745.159952][T23958] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 745.182175][T23958] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 17:09:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:56 executing program 5: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0xdd25}], 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x82307201, &(0x7f0000000240)) 17:09:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) 17:09:56 executing program 3: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:09:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000600053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:56 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:09:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) [ 747.633737][T23965] IPVS: ftp: loaded support on port[0] = 21 [ 747.706022][T23975] IPVS: ftp: loaded support on port[0] = 21 17:09:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000700053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 747.824883][T23973] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 747.871097][T23983] IPVS: ftp: loaded support on port[0] = 21 17:09:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 748.059610][T23990] IPVS: ftp: loaded support on port[0] = 21 [ 748.099652][T23986] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:09:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r2, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:09:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 748.261319][T23994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:09:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) [ 748.403574][T24002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 748.448227][T23994] IPVS: ftp: loaded support on port[0] = 21 [ 748.485055][T24002] IPVS: ftp: loaded support on port[0] = 21 [ 748.627656][T24009] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 748.671168][T24009] IPVS: ftp: loaded support on port[0] = 21 17:09:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:09:59 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:09:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a001400053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:09:59 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:09:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r2, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:09:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 750.785300][T24021] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 750.803946][T24024] IPVS: ftp: loaded support on port[0] = 21 17:09:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a003500053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 750.865785][T24022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 750.879687][T24037] IPVS: ftp: loaded support on port[0] = 21 [ 750.921271][T24021] IPVS: ftp: loaded support on port[0] = 21 [ 750.958347][T24039] IPVS: ftp: loaded support on port[0] = 21 [ 751.006402][T24028] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a004000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:00 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:10:00 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 751.428327][T24049] IPVS: ftp: loaded support on port[0] = 21 17:10:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 751.654568][T24060] IPVS: ftp: loaded support on port[0] = 21 [ 751.763927][T24061] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 751.828318][T24061] IPVS: ftp: loaded support on port[0] = 21 17:10:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:02 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:10:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 17:10:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) 17:10:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 753.884241][T24083] IPVS: ftp: loaded support on port[0] = 21 [ 753.897303][T24084] IPVS: ftp: loaded support on port[0] = 21 [ 753.923600][T24077] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 17:10:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00b000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000300053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 754.428911][T24093] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110) [ 754.497555][T24110] IPVS: ftp: loaded support on port[0] = 21 [ 754.505573][T24099] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 754.663161][T24103] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 754.819735][T24115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) 17:10:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000400053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) 17:10:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000600053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 757.087414][T24132] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 757.149511][T24142] IPVS: ftp: loaded support on port[0] = 21 [ 757.153093][T24128] IPVS: ftp: loaded support on port[0] = 21 17:10:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000700053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 757.416202][T24130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) 17:10:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000800053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) 17:10:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) 17:10:09 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 760.355141][T24196] IPVS: ftp: loaded support on port[0] = 21 17:10:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:09 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 760.492870][T24194] IPVS: ftp: loaded support on port[0] = 21 [ 760.516797][T24180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a001000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 760.758011][T24181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:10:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) 17:10:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) 17:10:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a001400053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:10:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 763.359883][T24237] IPVS: ftp: loaded support on port[0] = 21 17:10:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) 17:10:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a003500053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) 17:10:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 763.902679][T24257] IPVS: ftp: loaded support on port[0] = 21 [ 763.994997][T24261] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) 17:10:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) unshare(0x40000000) 17:10:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:15 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 766.483861][T24284] IPVS: ftp: loaded support on port[0] = 21 [ 766.557821][T24270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a005a00053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 766.690492][T24274] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 766.801600][T24272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) unshare(0x40000000) 17:10:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) 17:10:15 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r1, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) [ 767.178925][T24308] IPVS: ftp: loaded support on port[0] = 21 [ 767.328897][T24304] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 767.357079][T24310] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 767.391111][T24313] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00b000053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:18 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:10:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) 17:10:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) 17:10:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) unshare(0x40000000) 17:10:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0000b0053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 769.588307][T24330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 769.615884][T24331] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:18 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 769.697313][T24346] IPVS: ftp: loaded support on port[0] = 21 [ 769.857448][T24329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000204003582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 770.008096][T24332] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 770.085890][T24351] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) unshare(0x40000000) 17:10:19 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) [ 770.419871][T24365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 770.475433][T24373] IPVS: ftp: loaded support on port[0] = 21 [ 770.534807][T24372] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) 17:10:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000202053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r2, 0xffffffffffffffff, 0x80000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:10:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r2, 0xffffffffffffffff, 0x80000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 772.841769][T24386] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 772.909120][T24382] IPVS: ftp: loaded support on port[0] = 21 17:10:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000203053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 773.123804][T24407] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 773.164790][T24411] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000204053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 773.655399][T24433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:10:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000205053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 773.769746][T24445] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000206053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 774.050722][T24459] IPVS: ftp: loaded support on port[0] = 21 [ 774.135274][T24455] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 774.171148][T24464] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 774.467038][T24477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000207053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:25 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 776.585436][T24491] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 776.644478][T24489] IPVS: ftp: loaded support on port[0] = 21 17:10:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 776.721914][T24493] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000209053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 777.187572][T24512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 777.321211][T24518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 777.437339][T24531] IPVS: ftp: loaded support on port[0] = 21 17:10:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00020a053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 779.726194][T24541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 779.765331][T24545] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 779.811820][T24555] IPVS: ftp: loaded support on port[0] = 21 17:10:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00020e053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:10:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 780.001878][T24561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 780.270689][T24572] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 780.472232][T24583] IPVS: ftp: loaded support on port[0] = 21 [ 781.849986][ T0] NOHZ: local_softirq_pending 08 17:10:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00020f053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:10:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 782.891260][T24615] IPVS: ftp: loaded support on port[0] = 21 17:10:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 782.949943][T24620] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000248053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:10:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 783.330564][T24638] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:34 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00024c053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 786.039407][T24653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 786.266190][T24658] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000250053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 788.268675][T24684] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 788.555865][T24689] IPVS: ftp: loaded support on port[0] = 21 17:10:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000260053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000268053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 789.345235][T24710] IPVS: ftp: loaded support on port[0] = 21 17:10:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 789.541488][T24706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00026c053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000274053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 17:10:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 790.694243][T24790] IPVS: ftp: loaded support on port[0] = 21 17:10:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 17:10:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a00027a053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002a2053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 791.522908][T24837] IPVS: ftp: loaded support on port[0] = 21 17:10:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 791.754121][T24822] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 792.055701][T24831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002b0053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:41 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 792.483061][T24880] IPVS: ftp: loaded support on port[0] = 21 17:10:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:41 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 793.022283][T24905] ptrace attach of "/root/syz-executor.0"[24904] was attempted by "/root/syz-executor.0"[24905] 17:10:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:10:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200063582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:41 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 793.231544][T24914] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 793.283812][T24923] ptrace attach of "/root/syz-executor.0"[24922] was attempted by "/root/syz-executor.0"[24923] 17:10:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 793.351642][T24927] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200093582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 793.476255][T24933] IPVS: ftp: loaded support on port[0] = 21 17:10:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 793.712515][T24943] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 793.728025][T24918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 793.852275][T24948] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 794.059121][T24924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200143582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 794.279170][T24962] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 794.483380][T24980] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 794.630370][T24979] IPVS: ftp: loaded support on port[0] = 21 17:10:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200353582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 794.974263][T24970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 794.984581][T25006] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 795.102376][T25007] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 795.237955][T24976] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 795.332341][T24996] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002005a3582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 795.577055][T25018] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 795.771560][T25035] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 795.793095][T25033] IPVS: ftp: loaded support on port[0] = 21 17:10:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 796.050348][T25017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 796.228315][T25029] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:10:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200043582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200063582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) [ 796.730275][T25052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 796.909118][T25084] IPVS: ftp: loaded support on port[0] = 21 17:10:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200083582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 797.085637][T25076] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 797.140740][T25089] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) [ 797.333630][T25094] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 797.573431][T25104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 797.880192][T25118] IPVS: ftp: loaded support on port[0] = 21 [ 797.883045][T25113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200093582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:10:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 799.586423][T25127] validate_nla: 6 callbacks suppressed [ 799.586436][T25127] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 799.636171][T25136] IPVS: ftp: loaded support on port[0] = 21 17:10:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:10:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 799.741985][T25142] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 799.834837][T25128] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200103582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 800.063137][T25148] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 800.184117][T25152] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 800.198378][T25159] IPVS: ftp: loaded support on port[0] = 21 17:10:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:10:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:10:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 800.343958][T25162] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 800.452235][T25169] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 800.750767][T25170] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 801.001628][T25185] IPVS: ftp: loaded support on port[0] = 21 [ 801.120687][T25180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:10:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200143582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:10:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 802.766566][T25195] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 802.805018][T25190] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 802.843336][T25196] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 802.854369][T25204] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 802.909206][T25201] IPVS: ftp: loaded support on port[0] = 21 17:10:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) [ 802.960521][T25198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200353582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 803.121540][T25217] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 803.189712][T25220] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 803.257107][T25211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:10:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a0002005a3582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 803.544650][T25226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 803.578471][T25233] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 803.663628][T25230] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 803.723930][T25237] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:10:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:10:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 806.054685][T25246] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 806.074550][T25251] IPVS: ftp: loaded support on port[0] = 21 17:10:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 806.151504][T25262] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 806.189336][T25253] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 806.279282][T25254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 806.424079][T25266] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) 17:10:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 806.612696][T25274] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 806.678480][T25275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 806.709637][T25276] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 806.741441][T25285] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 806.913575][T25287] IPVS: ftp: loaded support on port[0] = 21 [ 806.927105][T25286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:10:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:10:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:10:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 809.281154][T25306] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 809.332193][T12053] tipc: TX() has been purged, node left! 17:10:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 809.395313][T25307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 809.418909][T25317] IPVS: ftp: loaded support on port[0] = 21 [ 809.519339][T12053] tipc: TX() has been purged, node left! [ 809.558485][T25304] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 809.869866][T25324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 809.921762][T25330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:10:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:10:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:10:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 810.011707][T25335] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 810.078742][T12053] tipc: TX() has been purged, node left! [ 810.213274][T25340] IPVS: ftp: loaded support on port[0] = 21 [ 810.359674][T12053] tipc: TX() has been purged, node left! [ 810.385109][T25354] IPVS: ftp: loaded support on port[0] = 21 [ 810.407281][T25333] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 810.419409][T12053] tipc: TX() has been purged, node left! [ 810.430369][T12053] tipc: TX() has been purged, node left! [ 810.441981][T12053] tipc: TX() has been purged, node left! [ 810.453468][T12053] tipc: TX() has been purged, node left! [ 810.463565][T25343] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 810.471667][T12053] tipc: TX() has been purged, node left! [ 810.480914][T12053] tipc: TX() has been purged, node left! [ 810.487282][T12053] tipc: TX() has been purged, node left! [ 810.497918][T12053] tipc: TX() has been purged, node left! [ 810.504241][T12053] tipc: TX() has been purged, node left! [ 810.514671][T12053] tipc: TX() has been purged, node left! [ 810.521183][T12053] tipc: TX() has been purged, node left! [ 810.527877][T12053] tipc: TX() has been purged, node left! [ 810.531415][T25348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 810.541547][T12053] tipc: TX() has been purged, node left! [ 810.549737][T12053] tipc: TX() has been purged, node left! [ 810.556389][T12053] tipc: TX() has been purged, node left! [ 810.617876][T25346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 810.718992][T12053] tipc: TX() has been purged, node left! [ 810.868683][T12053] tipc: TX() has been purged, node left! [ 811.038761][T12053] tipc: TX() has been purged, node left! [ 811.208711][T12053] tipc: TX() has been purged, node left! [ 811.378713][T12053] tipc: TX() has been purged, node left! [ 811.598744][T12053] tipc: TX() has been purged, node left! [ 811.768845][T12053] tipc: TX() has been purged, node left! [ 811.969715][T12053] tipc: TX() has been purged, node left! [ 812.148693][T12053] tipc: TX() has been purged, node left! 17:11:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:11:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 812.328621][T12053] tipc: TX() has been purged, node left! 17:11:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 812.497405][T25367] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 812.508731][T12053] tipc: TX() has been purged, node left! [ 812.550768][T25365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 812.564378][T25377] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 812.569320][T25365] IPVS: ftp: loaded support on port[0] = 21 17:11:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 812.632003][T25369] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 812.667433][T12053] tipc: TX() has been purged, node left! [ 812.682576][T12053] tipc: TX() has been purged, node left! [ 812.699381][T12053] tipc: TX() has been purged, node left! 17:11:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050682c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 812.738592][T12053] tipc: TX() has been purged, node left! [ 812.771306][T12053] tipc: TX() has been purged, node left! 17:11:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 812.928770][T12053] tipc: TX() has been purged, node left! [ 812.973095][T25383] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 813.037033][T25391] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 813.098723][T12053] tipc: TX() has been purged, node left! [ 813.163494][T25402] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 813.166094][T25401] IPVS: ftp: loaded support on port[0] = 21 [ 813.186711][T25403] IPVS: ftp: loaded support on port[0] = 21 [ 813.245856][T25384] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 813.270575][T12053] tipc: TX() has been purged, node left! [ 813.285946][T12053] tipc: TX() has been purged, node left! [ 813.322267][T12053] tipc: TX() has been purged, node left! [ 813.359604][T12053] tipc: TX() has been purged, node left! [ 813.363409][T25392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 813.373452][T12053] tipc: TX() has been purged, node left! [ 813.388808][T12053] tipc: TX() has been purged, node left! [ 813.421206][T12053] tipc: TX() has been purged, node left! [ 813.445303][T12053] tipc: TX() has been purged, node left! [ 813.457079][T12053] tipc: TX() has been purged, node left! [ 813.473608][T12053] tipc: TX() has been purged, node left! [ 813.500159][T25394] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 813.517732][T12053] tipc: TX() has been purged, node left! [ 813.530965][T12053] tipc: TX() has been purged, node left! [ 813.559922][T12053] tipc: TX() has been purged, node left! [ 813.563378][T25405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 813.628792][T12053] tipc: TX() has been purged, node left! [ 813.779014][T12053] tipc: TX() has been purged, node left! [ 813.928773][T12053] tipc: TX() has been purged, node left! [ 814.118735][T12053] tipc: TX() has been purged, node left! [ 814.298672][T12053] tipc: TX() has been purged, node left! [ 814.458684][T12053] tipc: TX() has been purged, node left! [ 814.628770][T12053] tipc: TX() has been purged, node left! [ 814.808927][T12053] tipc: TX() has been purged, node left! [ 814.988667][T12053] tipc: TX() has been purged, node left! [ 815.168719][T12053] tipc: TX() has been purged, node left! [ 815.328712][T12053] tipc: TX() has been purged, node left! 17:11:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050782c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 815.508612][T12053] tipc: TX() has been purged, node left! [ 815.639730][T25422] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 815.669061][T12053] tipc: TX() has been purged, node left! [ 815.707529][T25420] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 815.741462][T25420] IPVS: ftp: loaded support on port[0] = 21 [ 815.744355][T25433] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 815.761288][T25419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050882c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 815.804684][T25423] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 815.820427][T12053] tipc: TX() has been purged, node left! [ 815.826848][T12053] tipc: TX() has been purged, node left! [ 815.884205][T12053] tipc: TX() has been purged, node left! [ 815.893136][T12053] tipc: TX() has been purged, node left! [ 815.954931][T25438] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 816.003811][T25439] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 816.014346][T25424] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 816.088637][T12053] tipc: TX() has been purged, node left! 17:11:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050982c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 816.259072][T12053] tipc: TX() has been purged, node left! [ 816.333508][T25444] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 816.369158][T25446] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 816.408603][T12053] tipc: TX() has been purged, node left! [ 816.410142][T25454] IPVS: ftp: loaded support on port[0] = 21 [ 816.464402][T25459] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 816.521100][T25461] IPVS: ftp: loaded support on port[0] = 21 [ 816.552191][T25464] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 816.560769][T12053] tipc: TX() has been purged, node left! [ 816.567055][T12053] tipc: TX() has been purged, node left! [ 816.599069][T12053] tipc: TX() has been purged, node left! [ 816.611343][T12053] tipc: TX() has been purged, node left! [ 816.619123][T12053] tipc: TX() has been purged, node left! [ 816.655834][T12053] tipc: TX() has been purged, node left! [ 816.665054][T12053] tipc: TX() has been purged, node left! [ 816.732406][T12053] tipc: TX() has been purged, node left! [ 816.851373][T12053] tipc: TX() has been purged, node left! [ 817.018728][T12053] tipc: TX() has been purged, node left! [ 817.198611][T12053] tipc: TX() has been purged, node left! [ 817.368652][T12053] tipc: TX() has been purged, node left! [ 817.528608][T12053] tipc: TX() has been purged, node left! [ 817.698771][T12053] tipc: TX() has been purged, node left! [ 817.858674][T12053] tipc: TX() has been purged, node left! [ 818.048721][T12053] tipc: TX() has been purged, node left! [ 818.228696][T12053] tipc: TX() has been purged, node left! [ 818.388661][T12053] tipc: TX() has been purged, node left! [ 818.548716][T12053] tipc: TX() has been purged, node left! 17:11:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 818.738725][T12053] tipc: TX() has been purged, node left! [ 818.795598][T25472] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 818.840907][T25474] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 818.878966][T12053] tipc: TX() has been purged, node left! [ 818.894682][T25489] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 818.912169][T25474] IPVS: ftp: loaded support on port[0] = 21 [ 818.917507][T25473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 818.943886][T25490] IPVS: ftp: loaded support on port[0] = 21 [ 818.964058][T25476] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050b82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 818.993080][T12053] tipc: TX() has been purged, node left! [ 819.009977][T12053] tipc: TX() has been purged, node left! [ 819.040874][T12053] tipc: TX() has been purged, node left! [ 819.059199][T12053] tipc: TX() has been purged, node left! [ 819.075986][T25480] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 819.086652][T12053] tipc: TX() has been purged, node left! [ 819.098351][T25493] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:08 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 819.134169][T12053] tipc: TX() has been purged, node left! [ 819.161321][T12053] tipc: TX() has been purged, node left! [ 819.206849][T12053] tipc: TX() has been purged, node left! [ 819.223753][T25494] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 819.251061][T12053] tipc: TX() has been purged, node left! [ 819.264756][T12053] tipc: TX() has been purged, node left! [ 819.299240][T12053] tipc: TX() has been purged, node left! 17:11:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050c82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 819.418694][T25499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 819.470624][T12053] tipc: TX() has been purged, node left! [ 819.567768][T25509] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 819.629518][T12053] tipc: TX() has been purged, node left! [ 819.667197][T25515] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 819.711810][T25510] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 819.770475][T25510] IPVS: ftp: loaded support on port[0] = 21 [ 819.776510][T25513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 819.818328][T25513] IPVS: ftp: loaded support on port[0] = 21 [ 819.824715][T12053] tipc: TX() has been purged, node left! [ 819.883240][T12053] tipc: TX() has been purged, node left! [ 819.889893][T12053] tipc: TX() has been purged, node left! [ 819.896267][T12053] tipc: TX() has been purged, node left! [ 819.912512][T12053] tipc: TX() has been purged, node left! [ 820.098653][T12053] tipc: TX() has been purged, node left! [ 820.258731][T12053] tipc: TX() has been purged, node left! [ 820.448810][T12053] tipc: TX() has been purged, node left! [ 820.608686][T12053] tipc: TX() has been purged, node left! [ 820.788724][T12053] tipc: TX() has been purged, node left! [ 820.960524][T12053] tipc: TX() has been purged, node left! [ 821.118621][T12053] tipc: TX() has been purged, node left! [ 821.278674][T12053] tipc: TX() has been purged, node left! [ 821.438707][T12053] tipc: TX() has been purged, node left! [ 821.530113][ T0] NOHZ: local_softirq_pending 08 [ 821.618719][T12053] tipc: TX() has been purged, node left! 17:11:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 17:11:10 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050d82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) [ 821.778651][T12053] tipc: TX() has been purged, node left! [ 821.929205][T25531] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 821.959003][T12053] tipc: TX() has been purged, node left! 17:11:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 821.990657][T25532] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.022834][T25544] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 822.022952][T25529] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.071947][T25530] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.089288][T25545] IPVS: ftp: loaded support on port[0] = 21 [ 822.118796][T12053] tipc: TX() has been purged, node left! [ 822.125239][T12053] tipc: TX() has been purged, node left! [ 822.140650][T12053] tipc: TX() has been purged, node left! [ 822.151932][T12053] tipc: TX() has been purged, node left! 17:11:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050e82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 822.186767][T12053] tipc: TX() has been purged, node left! [ 822.194877][T25533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:11 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 822.368865][T12053] tipc: TX() has been purged, node left! [ 822.376562][T25552] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 822.461867][T25558] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200050f82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 822.562193][T12053] tipc: TX() has been purged, node left! [ 822.668915][T25561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.700730][T25563] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.709470][T12053] tipc: TX() has been purged, node left! [ 822.740471][T25575] IPVS: ftp: loaded support on port[0] = 21 [ 822.755190][T25564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.788927][T12053] tipc: TX() has been purged, node left! [ 822.789328][T25566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 822.802720][T12053] tipc: TX() has been purged, node left! 17:11:11 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 822.845122][T12053] tipc: TX() has been purged, node left! [ 822.852445][T12053] tipc: TX() has been purged, node left! [ 822.870803][T12053] tipc: TX() has been purged, node left! [ 822.882071][T12053] tipc: TX() has been purged, node left! 17:11:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051082c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 822.897106][T12053] tipc: TX() has been purged, node left! [ 822.966449][T12053] tipc: TX() has been purged, node left! [ 822.982815][T12053] tipc: TX() has been purged, node left! [ 823.012733][T12053] tipc: TX() has been purged, node left! [ 823.061548][T25579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 823.200186][T25589] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 823.238810][T12053] tipc: TX() has been purged, node left! [ 823.378958][T12053] tipc: TX() has been purged, node left! [ 823.498643][T12053] tipc: TX() has been purged, node left! [ 823.658641][T12053] tipc: TX() has been purged, node left! [ 823.818734][T12053] tipc: TX() has been purged, node left! [ 823.988842][T12053] tipc: TX() has been purged, node left! [ 824.148596][T12053] tipc: TX() has been purged, node left! [ 824.298639][T12053] tipc: TX() has been purged, node left! [ 824.478626][T12053] tipc: TX() has been purged, node left! [ 824.658698][T12053] tipc: TX() has been purged, node left! [ 824.828704][T12053] tipc: TX() has been purged, node left! [ 825.008782][T12053] tipc: TX() has been purged, node left! 17:11:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:11:14 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 17:11:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051182c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 825.178692][T12053] tipc: TX() has been purged, node left! [ 825.286398][T25609] validate_nla: 4 callbacks suppressed [ 825.286410][T25609] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:14 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 825.353984][T25606] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 825.399121][T12053] tipc: TX() has been purged, node left! [ 825.415480][T25621] IPVS: ftp: loaded support on port[0] = 21 [ 825.436651][T25622] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 825.545432][T12053] tipc: TX() has been purged, node left! [ 825.554620][T12053] tipc: TX() has been purged, node left! [ 825.567194][T12053] tipc: TX() has been purged, node left! [ 825.592038][T25608] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 825.631195][T25632] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 825.693398][T25634] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 825.705794][T25626] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 17:11:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 825.809853][T12053] tipc: TX() has been purged, node left! [ 825.938793][T12053] tipc: TX() has been purged, node left! [ 826.069044][T12053] tipc: TX() has been purged, node left! [ 826.082159][T25643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 826.103414][T25643] IPVS: ftp: loaded support on port[0] = 21 [ 826.120474][T12053] tipc: TX() has been purged, node left! [ 826.128753][T12053] tipc: TX() has been purged, node left! [ 826.151720][T25653] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 826.165092][T12053] tipc: TX() has been purged, node left! [ 826.240327][T25649] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 826.253981][T25653] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 826.319115][T12053] tipc: TX() has been purged, node left! 17:11:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:17 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:11:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 828.451972][T25664] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 828.526450][T25659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 828.574561][T25676] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 828.588412][T25677] IPVS: ftp: loaded support on port[0] = 21 17:11:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 828.699165][T25665] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 828.811402][T25681] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:17 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 828.952337][T25689] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 829.104256][T25701] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 829.146399][T25697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 829.176780][T25698] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:20 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051682c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 831.608657][T25716] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 831.635023][T25714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:20 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 831.723171][T25715] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 831.737780][T25714] IPVS: ftp: loaded support on port[0] = 21 [ 831.773548][T25729] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051782c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 832.031975][T25732] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 832.044092][T25742] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 832.133826][T25745] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 832.216143][T25743] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 832.287566][T25749] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:23 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051882c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) [ 834.716079][T25765] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 834.742136][T25762] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 834.747785][T25769] IPVS: ftp: loaded support on port[0] = 21 [ 834.814526][T25759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 834.862544][T25776] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 834.891405][T25767] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:23 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:11:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051982c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 835.184587][T25780] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 835.221934][T25780] IPVS: ftp: loaded support on port[0] = 21 [ 835.244922][T25798] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 835.257751][T25786] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 835.319794][T25789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 835.345345][T25791] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:24 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 835.369939][T25799] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 835.614084][T25803] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 835.636279][T25807] IPVS: ftp: loaded support on port[0] = 21 17:11:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:26 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:26 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:26 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 837.840433][T25817] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:26 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 837.903269][T25828] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 837.912362][T25815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 837.987157][T25832] IPVS: ftp: loaded support on port[0] = 21 [ 837.996610][T25814] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 838.042663][T25819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051b82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:26 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 838.112095][T25834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 838.349773][T25846] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 838.381783][T25844] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:27 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 838.415070][T25848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 838.493664][T25854] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 838.666406][T25857] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 838.682317][T25860] IPVS: ftp: loaded support on port[0] = 21 17:11:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:29 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051c82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:29 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 840.991399][T25871] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:29 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 841.051330][T25869] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 841.067685][T25877] IPVS: ftp: loaded support on port[0] = 21 [ 841.082071][T25880] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 841.172647][T25872] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051d82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:30 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:30 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 841.457235][T25892] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 841.549866][T25893] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 841.563832][T25902] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 841.576216][T25893] IPVS: ftp: loaded support on port[0] = 21 [ 841.619037][T25900] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:32 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200051e82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:32 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 844.110550][T25914] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 844.154220][T25917] IPVS: ftp: loaded support on port[0] = 21 [ 844.160165][T25918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:33 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 844.291746][T25924] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:33 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052182c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 844.543559][T25935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 844.557035][T25939] IPVS: ftp: loaded support on port[0] = 21 [ 844.792098][T25948] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 844.924419][T25951] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:11:35 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:35 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 847.262973][T25964] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 847.298264][T25959] IPVS: ftp: loaded support on port[0] = 21 17:11:36 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 847.401792][T25960] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 847.413122][T25973] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:36 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:11:36 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:36 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 847.754759][T25987] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:36 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 847.833492][T25990] IPVS: ftp: loaded support on port[0] = 21 [ 847.911967][T25998] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 848.117146][T26002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:39 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:39 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:39 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 850.386187][T26020] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 850.431831][T26018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 850.437700][T26017] IPVS: ftp: loaded support on port[0] = 21 [ 850.464876][T26030] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:39 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:39 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:39 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:39 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 850.956737][T26047] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 850.970697][T26048] IPVS: ftp: loaded support on port[0] = 21 [ 851.073980][T26053] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:42 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:42 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:42 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052682c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:42 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 853.559901][T26071] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 853.571043][T26065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 853.599705][T26076] IPVS: ftp: loaded support on port[0] = 21 17:11:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:42 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 853.755260][T26087] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:42 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052782c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 854.212697][T26102] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 854.293174][T26104] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:45 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:45 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:45 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052882c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 856.664350][T26112] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 856.715423][T26117] IPVS: ftp: loaded support on port[0] = 21 17:11:45 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:45 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 856.843667][T26125] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:45 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052982c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 857.201487][T26137] IPVS: ftp: loaded support on port[0] = 21 [ 857.216004][T26142] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 857.296441][T26146] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:48 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:48 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:48 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 859.790269][T26161] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:48 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:48 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 859.872072][T26169] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 859.974537][T26167] IPVS: ftp: loaded support on port[0] = 21 17:11:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052b82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:48 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:49 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 860.303876][T26186] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 860.434366][T26190] IPVS: ftp: loaded support on port[0] = 21 [ 860.463548][T26195] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:51 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:51 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052c82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:51 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 862.971911][T26203] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:51 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 863.073233][T26209] IPVS: ftp: loaded support on port[0] = 21 [ 863.084946][T26217] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:51 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:52 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052d82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:52 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 863.513039][T26235] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 863.624078][T26241] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:54 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:54 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:54 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:11:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052e82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 866.064712][T26252] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:54 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 866.105977][T26253] IPVS: ftp: loaded support on port[0] = 21 17:11:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:55 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 866.191094][T26263] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200052f82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:11:55 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 866.499103][T26278] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 866.593085][T26283] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:11:57 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:57 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:11:57 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053082c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 869.206002][T26301] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:58 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 869.307920][T26299] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 869.317666][T26302] IPVS: ftp: loaded support on port[0] = 21 17:11:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:58 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 869.353932][T26313] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:11:58 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:11:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053182c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 869.559470][T26317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:11:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 869.670218][T26326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 869.770733][T26333] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 869.874633][T26334] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 869.903402][T26339] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:01 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:01 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:01 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053282c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 872.368321][T26353] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:01 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 872.416162][T26348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 872.442327][T26350] IPVS: ftp: loaded support on port[0] = 21 [ 872.474276][T26363] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 872.485950][T26352] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:01 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053382c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:01 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) [ 872.795080][T26377] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 872.863784][T26378] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 872.892326][T26382] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 873.125757][T26387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:04 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:04 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:04 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053482c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) [ 875.495854][T26402] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 875.517507][T26396] IPVS: ftp: loaded support on port[0] = 21 17:12:04 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 875.581743][T26406] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 875.592748][T26414] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:04 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 875.667917][T26403] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200055a82c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:04 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:04 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 875.849391][T26418] IPVS: ftp: loaded support on port[0] = 21 [ 875.930203][T26424] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 876.020443][T26429] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 876.142676][T26433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:07 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:07 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582ca37153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:07 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 878.590441][T26453] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:07 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 878.645635][T26450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 878.684968][T26459] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:07 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 878.751821][T26457] IPVS: ftp: loaded support on port[0] = 21 17:12:07 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 878.885918][T26468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 878.928909][T26471] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c10a153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 879.195887][T26485] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 879.295427][T26490] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 879.313583][T26486] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:10 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:10 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 17:12:10 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:12:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c15a153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 881.747537][T26500] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 881.801989][T26509] IPVS: ftp: loaded support on port[0] = 21 17:12:10 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 881.844934][T26499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 881.884577][T26515] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 881.885934][T26502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:12:10 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) 17:12:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137353e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 882.061316][T26517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:10 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:11 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) [ 882.296560][T26524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 882.300820][T26532] IPVS: ftp: loaded support on port[0] = 21 [ 882.330040][T26530] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 882.378451][T26533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 882.390762][T26537] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 882.487971][T26538] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:13 executing program 3: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:13 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c1375a3e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:13 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:13 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 884.849590][T26553] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 884.921403][T26557] IPVS: ftp: loaded support on port[0] = 21 [ 884.927834][T26554] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 884.952482][T26566] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 884.978958][T26555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 885.028670][T26552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137155a370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:13 executing program 3: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:14 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 17:12:14 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) [ 885.230476][T26571] IPVS: ftp: loaded support on port[0] = 21 17:12:14 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 885.409316][T26579] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 885.434840][T26575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 885.461687][T26582] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:14 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) [ 885.588750][T26586] IPVS: ftp: loaded support on port[0] = 21 [ 885.626035][T26581] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 885.789024][T26592] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e0a0a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:12:16 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:16 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 887.985748][T26603] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:16 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 888.036516][T26604] IPVS: ftp: loaded support on port[0] = 21 [ 888.079735][T26605] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 888.095679][T26615] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:17 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 888.177126][T26618] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:17 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e5a0a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:17 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 888.440426][T26623] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 888.473146][T26627] IPVS: ftp: loaded support on port[0] = 21 [ 888.490460][T26630] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:17 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) [ 888.578277][T26635] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 888.598482][T26633] IPVS: ftp: loaded support on port[0] = 21 [ 888.820428][T26637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370200018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:12:19 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:19 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 17:12:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 891.141175][T26650] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 891.155924][T26650] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 891.214976][T26653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 891.228457][T26654] IPVS: ftp: loaded support on port[0] = 21 [ 891.243165][T26665] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 891.262331][T26665] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 891.278459][T26655] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:20 executing program 1: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 17:12:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370300018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:12:20 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 891.550294][T26670] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 891.587087][T26670] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 891.605321][T26672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 891.658852][T26679] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 891.684126][T26679] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 891.707497][T26674] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) [ 891.833558][T26680] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 891.861932][T26683] IPVS: ftp: loaded support on port[0] = 21 [ 892.055583][T26688] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:23 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) 17:12:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 894.297487][T26705] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 894.358832][T26703] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 894.373123][T26713] IPVS: ftp: loaded support on port[0] = 21 [ 894.373192][T26701] IPVS: ftp: loaded support on port[0] = 21 [ 894.393299][T26715] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 894.426563][T26706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370500018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 894.593481][T26718] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:23 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 894.710574][T26721] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 894.764726][T26720] IPVS: ftp: loaded support on port[0] = 21 17:12:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370600018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 894.963989][T26726] IPVS: ftp: loaded support on port[0] = 21 [ 894.974589][T26724] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 895.037367][T26729] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 895.051459][T26729] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 895.142527][T26730] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 895.152267][T26730] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:24 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370800018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 895.358272][T26737] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 895.367178][T26737] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 895.413475][T26738] IPVS: ftp: loaded support on port[0] = 21 [ 895.435889][T26739] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 895.463106][T26739] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 895.469192][T26734] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370900018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:26 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 897.337615][T26747] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 897.430099][T26752] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 897.513441][T26746] IPVS: ftp: loaded support on port[0] = 21 [ 897.524741][T26753] IPVS: ftp: loaded support on port[0] = 21 [ 897.546870][T26748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370b00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:27 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 898.973150][T26762] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 899.075361][T26761] IPVS: ftp: loaded support on port[0] = 21 [ 899.090441][T26765] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 899.119935][T26772] IPVS: ftp: loaded support on port[0] = 21 [ 899.134119][T26774] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 899.227292][T26771] IPVS: ftp: loaded support on port[0] = 21 17:12:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371000018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:28 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 899.403710][T26776] validate_nla: 2 callbacks suppressed [ 899.403723][T26776] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 899.418858][T26776] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 899.483755][T26778] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 899.520190][T26778] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371100018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 899.634556][T26781] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 899.656524][T26783] IPVS: ftp: loaded support on port[0] = 21 [ 899.721293][T26786] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 899.751715][T26786] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 899.846219][T26787] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 899.873182][T26787] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371200018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:29 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 900.519322][T26796] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 900.541510][T26796] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 900.602732][T26795] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 900.612617][T26805] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 900.638731][T26805] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 900.651810][T26794] IPVS: ftp: loaded support on port[0] = 21 [ 900.655931][T26795] IPVS: ftp: loaded support on port[0] = 21 17:12:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371300018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 900.924655][T26808] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 900.949723][T26808] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 901.065103][T26810] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 901.092557][T26810] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:30 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:30 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 902.057277][T26816] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 902.084372][T26824] IPVS: ftp: loaded support on port[0] = 21 [ 902.107077][T26816] IPVS: ftp: loaded support on port[0] = 21 [ 902.182401][T26817] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r3}}, 0x18) 17:12:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:32 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 903.464690][T26831] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 903.511292][T26832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 903.532763][T26835] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 903.549741][T26832] IPVS: ftp: loaded support on port[0] = 21 17:12:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e371600018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 903.740521][T26830] IPVS: ftp: loaded support on port[0] = 21 [ 903.780104][T26836] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:32 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r1, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e372500018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 904.204408][T26850] IPVS: ftp: loaded support on port[0] = 21 [ 904.242345][T26857] __nla_validate_parse: 4 callbacks suppressed [ 904.242363][T26857] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 904.265805][T26853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 904.297752][T26858] IPVS: ftp: loaded support on port[0] = 21 [ 904.385842][T26859] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e373500018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:33 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 17:12:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) [ 905.086915][T26868] validate_nla: 4 callbacks suppressed [ 905.086928][T26868] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 905.103435][T26868] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 905.190618][T26876] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 905.210663][T26876] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 905.216745][T26877] IPVS: ftp: loaded support on port[0] = 21 [ 905.250723][T26863] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e375000018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 905.356721][T26869] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 905.431711][T26880] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 905.440394][T26880] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 905.511704][T26882] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 905.520348][T26882] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:36 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) 17:12:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e375a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 907.820527][T26891] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 907.867802][T26891] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 907.982411][T26894] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 907.992888][T26907] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 908.001736][T26907] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 908.008141][T26902] IPVS: ftp: loaded support on port[0] = 21 [ 908.060160][T26897] IPVS: ftp: loaded support on port[0] = 21 17:12:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e374501018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:37 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) 17:12:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 908.333074][T26918] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 908.363559][T26918] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 908.394226][T26917] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 908.493320][T26928] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 908.527857][T26928] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r4, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) 17:12:37 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) 17:12:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) 17:12:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e375230018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 908.944807][T26944] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) [ 909.044256][T26941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 909.055715][T26951] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 909.247216][T26956] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 909.357191][T26954] IPVS: ftp: loaded support on port[0] = 21 17:12:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 17:12:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a03008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) unshare(0x40000000) 17:12:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "d3b34c1e6e0e19bca9de95bc08708b30623a3ff192807a285633eee8956bfe51a29d7ceec6aded21e52c9509d94754f90a53ca85ab54d7676f6dad5669b7ef2b6291031dd3f499050cf56472a8e4cfa7ad47957926779484940883623cc123a11c693a2815c533de72b1e8e7bdb23a8f8426163366047be7b6a9bad4e1bec173a80e568f121296506b506cfd34230dee69f6439a9303592985b75443d77c48ca1b3e58cd2238d30c00b39e6175b38675175e49702bef33359b27fabf31d67d120de86842a581d98f3e68f26443828e907da9dfdefcf74f1ce37614eaa2a27a08b1145c07083eafbe48729d0c7130d8790146c10d116bc861dfbbd4f61cf31c39"}}, 0x110) unshare(0x40000000) [ 911.508401][T26969] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 911.518398][T26969] __nla_validate_parse: 2 callbacks suppressed [ 911.518410][T26969] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 911.610537][T26976] IPVS: ftp: loaded support on port[0] = 21 [ 911.618335][T26978] IPVS: ftp: loaded support on port[0] = 21 [ 911.624907][T26980] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 911.650697][T26980] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 911.727580][T26964] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a04008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) [ 911.905758][T26983] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 911.928141][T26983] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 912.030507][T26989] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 912.066854][T26989] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) 17:12:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) [ 912.094241][T26988] IPVS: ftp: loaded support on port[0] = 21 17:12:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3b008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 912.373665][T27002] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 912.393284][T27002] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 912.466233][T27005] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 912.500998][T26997] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 912.512591][T27005] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 912.559993][T26998] IPVS: ftp: loaded support on port[0] = 21 17:12:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3c008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 912.800553][T27009] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 912.822486][T27009] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 912.897395][T27010] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 912.906371][T27010] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:12:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:12:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3d008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 914.565032][T27019] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 914.616734][T27019] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 914.753067][T27027] IPVS: ftp: loaded support on port[0] = 21 [ 914.792127][T27014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 914.801010][T27025] IPVS: ftp: loaded support on port[0] = 21 [ 914.815735][T27030] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 914.861060][T27030] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 914.862749][T27020] IPVS: ftp: loaded support on port[0] = 21 17:12:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:12:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a3e008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a41008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 915.401745][T27035] IPVS: ftp: loaded support on port[0] = 21 17:12:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:12:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x40000000) 17:12:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a42008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 915.744206][T27050] IPVS: ftp: loaded support on port[0] = 21 [ 915.951157][T27048] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 916.042086][T27054] IPVS: ftp: loaded support on port[0] = 21 17:12:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a43008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x75bb, 0x0, 0x4, 0x80000000, 0x4, {}, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x20, "c4c39796"}, 0x0, 0x1, @planes=0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1a, 0x2, @thr={&(0x7f00000003c0)="5a06c0538642696b6ad53fb0bd9e01cdd4ca90d8e5e14e55e2e11883c4cbbde45f6c99423540984237b9bf07ce37f53f2c54120884e61a6020ea30a877374f8224dec94d24be22b3f197a650d8c135b588e8512ec4d9836af71d6bbbc9dc7dc4a59e3814e6385de010a52b875fc70d4124eef58cbb7b5b6e1088369dab909ee3823d3bc826873bbe9c2f9594eff42fd86438848874b92ec6230e442f49cc94cb2013e1a2e7d6534778d0d0d34b154101d532b421db9ff5f0d669f1cc57aaf18cbc5a23b344ca92da45a8f83c6dbcd0dfb037fa07e2bbe06d1110cb6f28f8ad20c5442a46f00c139639", &(0x7f00000004c0)}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x101, 0x98980) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) recvmsg$kcm(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r6, 0x0, '^V3', "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"}}, 0x110) unshare(0x40000000) 17:12:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) [ 917.670296][T27065] validate_nla: 6 callbacks suppressed [ 917.670309][T27065] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 917.736948][T27065] __nla_validate_parse: 6 callbacks suppressed [ 917.736957][T27065] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) [ 917.847849][T27066] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 917.864685][T27074] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 917.890909][T27074] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 918.041604][T27066] IPVS: ftp: loaded support on port[0] = 21 17:12:48 executing program 1 (fault-call:3 fault-nth:0): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a44008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 17:12:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:48 executing program 2 (fault-call:8 fault-nth:0): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 919.800170][T27086] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 919.830532][T27091] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 919.843044][T27094] FAULT_INJECTION: forcing a failure. [ 919.843044][T27094] name failslab, interval 1, probability 0, space 0, times 0 [ 919.853974][T27091] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 919.863431][T27094] CPU: 1 PID: 27094 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 919.874681][T27094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.884770][T27094] Call Trace: [ 919.888371][T27094] dump_stack+0x197/0x210 [ 919.892777][T27094] should_fail.cold+0x5/0xd [ 919.897308][T27094] ? fault_create_debugfs_attr+0x140/0x140 [ 919.903144][T27094] ? ___might_sleep+0x163/0x2c0 [ 919.908046][T27094] __should_failslab+0xb7/0x100 [ 919.913027][T27094] should_failslab+0x9/0x14 [ 919.917606][T27094] kmem_cache_alloc_trace+0x2d3/0x790 [ 919.923139][T27094] ? xas_find_conflict+0x890/0x890 [ 919.928259][T27094] ? rcu_read_lock_held+0x9c/0xb0 [ 919.933385][T27094] cma_alloc_port+0x56/0x1b0 [ 919.937996][T27094] rdma_bind_addr+0x1659/0x1f80 [ 919.942882][T27094] ? cma_ndev_work_handler+0x190/0x190 [ 919.948352][T27094] ? lock_downgrade+0x920/0x920 [ 919.953215][T27094] ? rwlock_bug.part.0+0x90/0x90 [ 919.958197][T27094] rdma_listen+0xa3/0x970 [ 919.962561][T27094] ? _raw_spin_unlock+0x28/0x40 [ 919.967501][T27094] ucma_listen+0x14d/0x1c0 [ 919.971930][T27094] ? ucma_notify+0x190/0x190 [ 919.976535][T27094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 919.984186][T27094] ? _copy_from_user+0x12c/0x1a0 [ 919.989142][T27094] ucma_write+0x2d7/0x3c0 [ 919.993491][T27094] ? ucma_notify+0x190/0x190 [ 919.998113][T27094] ? ucma_open+0x290/0x290 [ 920.002796][T27094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 920.009094][T27094] ? security_file_permission+0x8f/0x380 [ 920.014751][T27094] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 920.020209][T27094] __vfs_write+0x8a/0x110 [ 920.024603][T27094] ? ucma_open+0x290/0x290 [ 920.029043][T27094] vfs_write+0x268/0x5d0 [ 920.033310][T27094] ksys_write+0x220/0x290 [ 920.037645][T27094] ? __ia32_sys_read+0xb0/0xb0 [ 920.042426][T27094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.047925][T27094] ? do_syscall_64+0x26/0x790 [ 920.052609][T27094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.058933][T27094] ? do_syscall_64+0x26/0x790 [ 920.063654][T27094] __x64_sys_write+0x73/0xb0 [ 920.068272][T27094] do_syscall_64+0xfa/0x790 [ 920.072801][T27094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.079735][T27094] RIP: 0033:0x45c449 [ 920.083645][T27094] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.103383][T27094] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 920.111985][T27094] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 920.119970][T27094] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 920.127961][T27094] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 920.135932][T27094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 920.143926][T27094] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000000 [ 920.162251][T27086] IPVS: ftp: loaded support on port[0] = 21 17:12:49 executing program 1 (fault-call:3 fault-nth:1): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 920.232170][T27099] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 920.244447][T27099] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 920.432509][T27101] FAULT_INJECTION: forcing a failure. [ 920.432509][T27101] name failslab, interval 1, probability 0, space 0, times 0 [ 920.445884][T27101] CPU: 1 PID: 27101 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 920.454776][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.464964][T27101] Call Trace: [ 920.468276][T27101] dump_stack+0x197/0x210 [ 920.473175][T27101] should_fail.cold+0x5/0xd [ 920.477711][T27101] ? fault_create_debugfs_attr+0x140/0x140 [ 920.483553][T27101] ? stack_trace_save+0x8f/0xc0 [ 920.488428][T27101] ? stack_trace_consume_entry+0x170/0x170 [ 920.494484][T27101] __should_failslab+0xb7/0x100 [ 920.499367][T27101] should_failslab+0x9/0x14 [ 920.503892][T27101] kmem_cache_alloc+0x47/0x710 [ 920.508710][T27101] ? save_stack+0x5c/0x90 [ 920.513060][T27101] ? save_stack+0x23/0x90 [ 920.517419][T27101] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 920.524455][T27101] ? kasan_kmalloc+0x9/0x10 [ 920.528975][T27101] ? kmem_cache_alloc_trace+0x158/0x790 [ 920.534553][T27101] xas_alloc+0x346/0x460 [ 920.538824][T27101] xas_create+0x2cd/0x1060 [ 920.543304][T27101] xas_store+0x9a/0x1a00 [ 920.547578][T27101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 920.553838][T27101] ? xas_start+0x166/0x560 [ 920.558372][T27101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 920.564735][T27101] ? xas_load+0x67/0x150 [ 920.569005][T27101] __xa_insert+0x17b/0x2a0 [ 920.573556][T27101] ? __xa_cmpxchg+0x2f0/0x2f0 [ 920.578291][T27101] cma_alloc_port+0xb9/0x1b0 [ 920.582911][T27101] rdma_bind_addr+0x1659/0x1f80 [ 920.587809][T27101] ? cma_ndev_work_handler+0x190/0x190 [ 920.593283][T27101] ? lock_downgrade+0x920/0x920 [ 920.598158][T27101] ? rwlock_bug.part.0+0x90/0x90 [ 920.603116][T27101] rdma_listen+0xa3/0x970 [ 920.607990][T27101] ? _raw_spin_unlock+0x28/0x40 [ 920.612853][T27101] ucma_listen+0x14d/0x1c0 [ 920.617297][T27101] ? ucma_notify+0x190/0x190 [ 920.621903][T27101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 920.628228][T27101] ? _copy_from_user+0x12c/0x1a0 [ 920.633348][T27101] ucma_write+0x2d7/0x3c0 [ 920.637693][T27101] ? ucma_notify+0x190/0x190 [ 920.642301][T27101] ? ucma_open+0x290/0x290 [ 920.646729][T27101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 920.652976][T27101] ? security_file_permission+0x8f/0x380 [ 920.658638][T27101] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 920.663947][T27101] __vfs_write+0x8a/0x110 [ 920.668288][T27101] ? ucma_open+0x290/0x290 [ 920.672715][T27101] vfs_write+0x268/0x5d0 [ 920.676994][T27101] ksys_write+0x220/0x290 17:12:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:49 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 17:12:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a45008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 920.681349][T27101] ? __ia32_sys_read+0xb0/0xb0 [ 920.686126][T27101] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.691611][T27101] ? do_syscall_64+0x26/0x790 [ 920.696301][T27101] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.702380][T27101] ? do_syscall_64+0x26/0x790 [ 920.707194][T27101] __x64_sys_write+0x73/0xb0 [ 920.711804][T27101] do_syscall_64+0xfa/0x790 [ 920.716337][T27101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.722241][T27101] RIP: 0033:0x45c449 [ 920.726144][T27101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.745889][T27101] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 920.754430][T27101] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 920.762425][T27101] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 920.770417][T27101] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 920.778407][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 920.786394][T27101] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000001 17:12:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 920.853999][T27115] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 920.859807][T27101] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 920.869739][T27115] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 920.888044][T27114] IPVS: ftp: loaded support on port[0] = 21 17:12:49 executing program 1 (fault-call:3 fault-nth:2): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 920.973923][T27111] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 921.009206][T27111] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 921.103725][T27124] FAULT_INJECTION: forcing a failure. [ 921.103725][T27124] name failslab, interval 1, probability 0, space 0, times 0 [ 921.116922][T27124] CPU: 1 PID: 27124 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 921.125635][T27124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.135704][T27124] Call Trace: [ 921.139021][T27124] dump_stack+0x197/0x210 [ 921.143386][T27124] should_fail.cold+0x5/0xd [ 921.147917][T27124] ? fault_create_debugfs_attr+0x140/0x140 17:12:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a46008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 921.154047][T27124] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 921.159653][T27124] __should_failslab+0xb7/0x100 [ 921.164527][T27124] should_failslab+0x9/0x14 [ 921.169165][T27124] kmem_cache_alloc+0x47/0x710 [ 921.173971][T27124] xas_alloc+0x346/0x460 [ 921.178240][T27124] xas_create+0x2cd/0x1060 [ 921.182698][T27124] xas_store+0x9a/0x1a00 [ 921.186973][T27124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.193245][T27124] ? xas_start+0x166/0x560 [ 921.197688][T27124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.203957][T27124] ? xas_load+0x67/0x150 [ 921.208223][T27124] __xa_insert+0x17b/0x2a0 [ 921.212866][T27124] ? __xa_cmpxchg+0x2f0/0x2f0 [ 921.220289][T27124] cma_alloc_port+0xb9/0x1b0 [ 921.224921][T27124] rdma_bind_addr+0x1659/0x1f80 [ 921.229833][T27124] ? cma_ndev_work_handler+0x190/0x190 [ 921.235313][T27124] ? lock_downgrade+0x920/0x920 [ 921.240302][T27124] ? rwlock_bug.part.0+0x90/0x90 [ 921.245476][T27124] rdma_listen+0xa3/0x970 [ 921.249823][T27124] ? _raw_spin_unlock+0x28/0x40 [ 921.254693][T27124] ucma_listen+0x14d/0x1c0 [ 921.259114][T27124] ? ucma_notify+0x190/0x190 [ 921.263728][T27124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.269991][T27124] ? _copy_from_user+0x12c/0x1a0 [ 921.275062][T27124] ucma_write+0x2d7/0x3c0 [ 921.279399][T27124] ? ucma_notify+0x190/0x190 [ 921.284000][T27124] ? ucma_open+0x290/0x290 [ 921.288444][T27124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 921.294705][T27124] ? security_file_permission+0x8f/0x380 [ 921.300352][T27124] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 921.305670][T27124] __vfs_write+0x8a/0x110 [ 921.310010][T27124] ? ucma_open+0x290/0x290 [ 921.314506][T27124] vfs_write+0x268/0x5d0 [ 921.318786][T27124] ksys_write+0x220/0x290 [ 921.323125][T27124] ? __ia32_sys_read+0xb0/0xb0 [ 921.327903][T27124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.333376][T27124] ? do_syscall_64+0x26/0x790 [ 921.338054][T27124] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.344234][T27124] ? do_syscall_64+0x26/0x790 [ 921.348952][T27124] __x64_sys_write+0x73/0xb0 [ 921.353568][T27124] do_syscall_64+0xfa/0x790 [ 921.358101][T27124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.364152][T27124] RIP: 0033:0x45c449 [ 921.368135][T27124] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.387893][T27124] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.396379][T27124] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 921.404410][T27124] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 921.412414][T27124] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 921.420412][T27124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 921.428454][T27124] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000002 17:12:50 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1b6, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 17:12:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 921.607253][T27124] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 921.639271][T27128] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 921.661355][T27128] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 921.700011][T27133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 921.720093][T27133] IPVS: ftp: loaded support on port[0] = 21 [ 921.796015][T27128] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 921.809933][T27128] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 921.883888][T27139] IPVS: ftp: loaded support on port[0] = 21 17:12:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:51 executing program 1 (fault-call:3 fault-nth:3): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 17:12:51 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xa0200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 922.871609][T27149] FAULT_INJECTION: forcing a failure. [ 922.871609][T27149] name failslab, interval 1, probability 0, space 0, times 0 [ 922.884752][T27149] CPU: 1 PID: 27149 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 922.893555][T27149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.903714][T27149] Call Trace: [ 922.907029][T27149] dump_stack+0x197/0x210 [ 922.911390][T27149] should_fail.cold+0x5/0xd [ 922.916076][T27149] ? fault_create_debugfs_attr+0x140/0x140 [ 922.922035][T27149] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 922.927615][T27149] __should_failslab+0xb7/0x100 [ 922.932504][T27149] should_failslab+0x9/0x14 [ 922.937036][T27149] kmem_cache_alloc+0x47/0x710 [ 922.941841][T27149] xas_alloc+0x346/0x460 [ 922.946147][T27149] xas_create+0x2cd/0x1060 [ 922.950606][T27149] xas_store+0x9a/0x1a00 [ 922.954871][T27149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 922.961137][T27149] ? xas_start+0x166/0x560 [ 922.965592][T27149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 922.971867][T27149] ? xas_load+0x67/0x150 [ 922.976145][T27149] __xa_insert+0x17b/0x2a0 [ 922.980602][T27149] ? __xa_cmpxchg+0x2f0/0x2f0 [ 922.985336][T27149] cma_alloc_port+0xb9/0x1b0 [ 922.989997][T27149] rdma_bind_addr+0x1659/0x1f80 [ 922.994892][T27149] ? cma_ndev_work_handler+0x190/0x190 [ 923.000369][T27149] ? lock_downgrade+0x920/0x920 [ 923.005398][T27149] ? rwlock_bug.part.0+0x90/0x90 [ 923.010381][T27149] rdma_listen+0xa3/0x970 [ 923.014733][T27149] ? _raw_spin_unlock+0x28/0x40 [ 923.019616][T27149] ucma_listen+0x14d/0x1c0 [ 923.024067][T27149] ? ucma_notify+0x190/0x190 [ 923.028716][T27149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 923.035074][T27149] ? _copy_from_user+0x12c/0x1a0 [ 923.040050][T27149] ucma_write+0x2d7/0x3c0 [ 923.044627][T27149] ? ucma_notify+0x190/0x190 [ 923.049246][T27149] ? ucma_open+0x290/0x290 [ 923.053699][T27149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 923.060076][T27149] ? security_file_permission+0x8f/0x380 [ 923.065733][T27149] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 923.071060][T27149] __vfs_write+0x8a/0x110 [ 923.075759][T27149] ? ucma_open+0x290/0x290 [ 923.080548][T27149] vfs_write+0x268/0x5d0 [ 923.084830][T27149] ksys_write+0x220/0x290 [ 923.089224][T27149] ? __ia32_sys_read+0xb0/0xb0 [ 923.094041][T27149] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 923.099524][T27149] ? do_syscall_64+0x26/0x790 [ 923.104226][T27149] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.110351][T27149] ? do_syscall_64+0x26/0x790 [ 923.115070][T27149] __x64_sys_write+0x73/0xb0 [ 923.119691][T27149] do_syscall_64+0xfa/0x790 [ 923.124237][T27149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.130144][T27149] RIP: 0033:0x45c449 [ 923.134107][T27149] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.153826][T27149] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.162324][T27149] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 923.170313][T27149] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 923.178440][T27149] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 923.186434][T27149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 923.194508][T27149] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000003 [ 923.215707][T27157] IPVS: ftp: loaded support on port[0] = 21 [ 923.370056][T27149] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a47008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 17:12:52 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x40012083) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000140)={0x754, 0x1, 0x6}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 17:12:52 executing program 1 (fault-call:3 fault-nth:4): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 923.903306][T27168] FAULT_INJECTION: forcing a failure. [ 923.903306][T27168] name failslab, interval 1, probability 0, space 0, times 0 [ 923.923812][T27170] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 923.966249][T27170] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 924.002945][T27168] CPU: 1 PID: 27168 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 924.012368][T27168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.022464][T27168] Call Trace: [ 924.025827][T27168] dump_stack+0x197/0x210 [ 924.030199][T27168] should_fail.cold+0x5/0xd [ 924.034763][T27168] ? fault_create_debugfs_attr+0x140/0x140 [ 924.040595][T27168] ? ___might_sleep+0x163/0x2c0 [ 924.046159][T27168] __should_failslab+0xb7/0x100 [ 924.051151][T27168] should_failslab+0x9/0x14 [ 924.055660][T27168] kmem_cache_alloc_trace+0x2d3/0x790 [ 924.061224][T27168] ? lock_downgrade+0x920/0x920 [ 924.066101][T27168] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 924.071999][T27168] ? cma_comp_exch+0xac/0xd0 [ 924.076617][T27168] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 924.082453][T27168] ? cma_alloc_port+0x1b0/0x1b0 [ 924.087327][T27168] __rdma_create_id+0x5e/0x870 [ 924.092115][T27168] cma_listen_on_dev+0x1cd/0x6a0 [ 924.097080][T27168] rdma_listen+0x772/0x970 [ 924.101523][T27168] ? _raw_spin_unlock+0x28/0x40 [ 924.106398][T27168] ucma_listen+0x14d/0x1c0 [ 924.110858][T27168] ? ucma_notify+0x190/0x190 [ 924.115471][T27168] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 924.122261][T27168] ? _copy_from_user+0x12c/0x1a0 [ 924.127348][T27168] ucma_write+0x2d7/0x3c0 [ 924.131698][T27168] ? ucma_notify+0x190/0x190 [ 924.136302][T27168] ? ucma_open+0x290/0x290 [ 924.140754][T27168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 924.147026][T27168] ? security_file_permission+0x8f/0x380 [ 924.152839][T27168] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 924.158246][T27168] __vfs_write+0x8a/0x110 [ 924.162588][T27168] ? ucma_open+0x290/0x290 [ 924.167039][T27168] vfs_write+0x268/0x5d0 [ 924.171664][T27168] ksys_write+0x220/0x290 [ 924.176800][T27168] ? __ia32_sys_read+0xb0/0xb0 [ 924.181577][T27168] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.187049][T27168] ? do_syscall_64+0x26/0x790 [ 924.191742][T27168] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.197819][T27168] ? do_syscall_64+0x26/0x790 [ 924.202521][T27168] __x64_sys_write+0x73/0xb0 [ 924.207168][T27168] do_syscall_64+0xfa/0x790 [ 924.211707][T27168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.217609][T27168] RIP: 0033:0x45c449 [ 924.221512][T27168] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.241220][T27168] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.249695][T27168] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 924.257804][T27168] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 924.265914][T27168] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 924.273896][T27168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 924.281905][T27168] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000004 17:12:53 executing program 1 (fault-call:3 fault-nth:5): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 924.364117][T27180] IPVS: ftp: loaded support on port[0] = 21 [ 924.454134][T27167] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 924.482579][T27182] FAULT_INJECTION: forcing a failure. [ 924.482579][T27182] name failslab, interval 1, probability 0, space 0, times 0 [ 924.514784][T27187] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 924.520408][T27182] CPU: 0 PID: 27182 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 924.531576][T27182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.541647][T27182] Call Trace: [ 924.544959][T27182] dump_stack+0x197/0x210 [ 924.549333][T27182] should_fail.cold+0x5/0xd [ 924.553346][T27187] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 924.553862][T27182] ? fault_create_debugfs_attr+0x140/0x140 [ 924.568959][T27182] ? ___might_sleep+0x163/0x2c0 [ 924.573839][T27182] __should_failslab+0xb7/0x100 [ 924.578716][T27182] should_failslab+0x9/0x14 [ 924.583239][T27182] kmem_cache_alloc_trace+0x2d3/0x790 [ 924.588626][T27182] ? trace_hardirqs_on+0x67/0x240 [ 924.593910][T27182] ? cma_ib_req_handler+0x54e0/0x54e0 [ 924.599298][T27182] iw_create_cm_id+0x57/0x3a0 [ 924.603995][T27182] rdma_listen+0x48c/0x970 [ 924.608425][T27182] cma_listen_on_dev+0x530/0x6a0 [ 924.613393][T27182] rdma_listen+0x772/0x970 [ 924.617827][T27182] ? _raw_spin_unlock+0x28/0x40 [ 924.622707][T27182] ucma_listen+0x14d/0x1c0 [ 924.627167][T27182] ? ucma_notify+0x190/0x190 [ 924.631772][T27182] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 924.638316][T27182] ? _copy_from_user+0x12c/0x1a0 [ 924.643299][T27182] ucma_write+0x2d7/0x3c0 [ 924.647640][T27182] ? ucma_notify+0x190/0x190 [ 924.652245][T27182] ? ucma_open+0x290/0x290 [ 924.656687][T27182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 924.662949][T27182] ? security_file_permission+0x8f/0x380 [ 924.668589][T27182] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 924.673927][T27182] __vfs_write+0x8a/0x110 [ 924.678279][T27182] ? ucma_open+0x290/0x290 [ 924.682709][T27182] vfs_write+0x268/0x5d0 [ 924.687079][T27182] ksys_write+0x220/0x290 [ 924.691450][T27182] ? __ia32_sys_read+0xb0/0xb0 [ 924.696226][T27182] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.701706][T27182] ? do_syscall_64+0x26/0x790 [ 924.706403][T27182] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.712558][T27182] ? do_syscall_64+0x26/0x790 [ 924.717943][T27182] __x64_sys_write+0x73/0xb0 [ 924.722539][T27182] do_syscall_64+0xfa/0x790 [ 924.727069][T27182] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.733923][T27182] RIP: 0033:0x45c449 [ 924.737837][T27182] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.757579][T27182] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.766005][T27182] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 924.773997][T27182] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 924.781984][T27182] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 924.789973][T27182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 924.798053][T27182] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000005 [ 924.835899][T27182] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 17:12:53 executing program 1 (fault-call:3 fault-nth:6): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 924.913953][T27179] IPVS: ftp: loaded support on port[0] = 21 [ 925.026637][T27196] FAULT_INJECTION: forcing a failure. [ 925.026637][T27196] name failslab, interval 1, probability 0, space 0, times 0 [ 925.040718][T27196] CPU: 0 PID: 27196 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 925.049419][T27196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.059596][T27196] Call Trace: [ 925.062953][T27196] dump_stack+0x197/0x210 [ 925.067329][T27196] should_fail.cold+0x5/0xd [ 925.071873][T27196] ? fault_create_debugfs_attr+0x140/0x140 [ 925.077861][T27196] ? is_bpf_image_address+0x1da/0x290 [ 925.083274][T27196] __should_failslab+0xb7/0x100 [ 925.088141][T27196] should_failslab+0x9/0x14 [ 925.092662][T27196] kmem_cache_alloc+0x47/0x710 [ 925.098060][T27196] ? error_exit+0xb/0x20 [ 925.102333][T27196] xas_alloc+0x346/0x460 [ 925.106611][T27196] xas_create+0x5b2/0x1060 [ 925.111063][T27196] xas_store+0x9a/0x1a00 [ 925.115306][T27196] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 925.121035][T27196] ? xas_find_marked+0x365/0xf00 [ 925.126689][T27196] ? __kasan_check_read+0x11/0x20 [ 925.132343][T27196] __xa_alloc+0x243/0x3b0 [ 925.136706][T27196] ? xas_find_marked+0xf00/0xf00 [ 925.141670][T27196] ? trace_hardirqs_on+0x67/0x240 [ 925.146717][T27196] ? mark_held_locks+0xf0/0xf0 [ 925.151619][T27196] __xa_alloc_cyclic+0x119/0x390 [ 925.156604][T27196] ? __xa_alloc+0x3b0/0x3b0 [ 925.161172][T27196] rdma_restrack_add+0x193/0x3f0 [ 925.166124][T27196] rdma_restrack_uadd+0x12b/0x160 [ 925.171152][T27196] _cma_attach_to_dev+0x25a/0x2f0 [ 925.176322][T27196] cma_listen_on_dev+0x252/0x6a0 [ 925.181298][T27196] rdma_listen+0x772/0x970 [ 925.185735][T27196] ? _raw_spin_unlock+0x28/0x40 [ 925.190604][T27196] ucma_listen+0x14d/0x1c0 [ 925.195033][T27196] ? ucma_notify+0x190/0x190 [ 925.199631][T27196] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 925.205879][T27196] ? _copy_from_user+0x12c/0x1a0 [ 925.210840][T27196] ucma_write+0x2d7/0x3c0 [ 925.215189][T27196] ? ucma_notify+0x190/0x190 [ 925.219791][T27196] ? ucma_open+0x290/0x290 [ 925.224240][T27196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 925.230520][T27196] ? security_file_permission+0x8f/0x380 [ 925.236182][T27196] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 925.241500][T27196] __vfs_write+0x8a/0x110 [ 925.245845][T27196] ? ucma_open+0x290/0x290 [ 925.250278][T27196] vfs_write+0x268/0x5d0 [ 925.254571][T27196] ksys_write+0x220/0x290 [ 925.258937][T27196] ? __ia32_sys_read+0xb0/0xb0 [ 925.263865][T27196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 925.269344][T27196] ? do_syscall_64+0x26/0x790 [ 925.274032][T27196] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.280243][T27196] ? do_syscall_64+0x26/0x790 [ 925.284948][T27196] __x64_sys_write+0x73/0xb0 [ 925.289554][T27196] do_syscall_64+0xfa/0x790 [ 925.294076][T27196] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.299966][T27196] RIP: 0033:0x45c449 [ 925.303862][T27196] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.323468][T27196] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 925.331891][T27196] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 925.339874][T27196] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 925.347858][T27196] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 925.356045][T27196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 925.364086][T27196] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000006 [ 925.442989][T27196] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:54 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 17:12:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 17:12:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:54 executing program 1 (fault-call:3 fault-nth:7): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 926.019203][T27205] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 926.026757][T27208] FAULT_INJECTION: forcing a failure. [ 926.026757][T27208] name failslab, interval 1, probability 0, space 0, times 0 [ 926.048902][T27208] CPU: 1 PID: 27208 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 926.057618][T27208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.067758][T27208] Call Trace: [ 926.071058][T27208] dump_stack+0x197/0x210 [ 926.075502][T27208] should_fail.cold+0x5/0xd [ 926.080031][T27208] ? fault_create_debugfs_attr+0x140/0x140 [ 926.085850][T27208] ? ___might_sleep+0x163/0x2c0 [ 926.090707][T27208] __should_failslab+0xb7/0x100 [ 926.095556][T27208] should_failslab+0x9/0x14 [ 926.100065][T27208] kmem_cache_alloc_trace+0x2d3/0x790 [ 926.105448][T27208] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 926.111422][T27208] alloc_work_entries+0xaf/0x240 [ 926.116372][T27208] iw_cm_listen+0x47/0x1f0 [ 926.120801][T27208] rdma_listen+0x613/0x970 [ 926.125232][T27208] cma_listen_on_dev+0x530/0x6a0 [ 926.130178][T27208] rdma_listen+0x772/0x970 [ 926.134601][T27208] ? _raw_spin_unlock+0x28/0x40 [ 926.139452][T27208] ucma_listen+0x14d/0x1c0 [ 926.143860][T27208] ? ucma_notify+0x190/0x190 [ 926.148840][T27208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 926.155077][T27208] ? _copy_from_user+0x12c/0x1a0 [ 926.160038][T27208] ucma_write+0x2d7/0x3c0 [ 926.164365][T27208] ? ucma_notify+0x190/0x190 [ 926.169091][T27208] ? ucma_open+0x290/0x290 [ 926.173516][T27208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 926.179766][T27208] ? security_file_permission+0x8f/0x380 [ 926.185403][T27208] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 926.190698][T27208] __vfs_write+0x8a/0x110 [ 926.195037][T27208] ? ucma_open+0x290/0x290 [ 926.199467][T27208] vfs_write+0x268/0x5d0 [ 926.203716][T27208] ksys_write+0x220/0x290 [ 926.208060][T27208] ? __ia32_sys_read+0xb0/0xb0 [ 926.212836][T27208] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.218292][T27208] ? do_syscall_64+0x26/0x790 [ 926.222976][T27208] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.229058][T27208] ? do_syscall_64+0x26/0x790 [ 926.233759][T27208] __x64_sys_write+0x73/0xb0 [ 926.238361][T27208] do_syscall_64+0xfa/0x790 [ 926.242922][T27208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.248825][T27208] RIP: 0033:0x45c449 [ 926.252803][T27208] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.272637][T27208] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 926.281171][T27208] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 926.289146][T27208] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 926.297114][T27208] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 926.305285][T27208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 926.313283][T27208] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000007 [ 926.333331][T27217] IPVS: ftp: loaded support on port[0] = 21 [ 926.338943][T27208] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 [ 926.477076][T27212] IPVS: ftp: loaded support on port[0] = 21 17:12:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a48008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:55 executing program 1 (fault-call:3 fault-nth:8): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 17:12:55 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) r4 = accept$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000140)=0x1c) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0xff, {{0xa, 0x72a0, 0xcf, @mcast2, 0x7fffffff}}, {{0xa, 0x4e23, 0x6, @remote, 0x1}}}, 0x108) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 926.989447][T27223] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:12:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 927.032693][T27223] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 927.044195][T27228] FAULT_INJECTION: forcing a failure. [ 927.044195][T27228] name failslab, interval 1, probability 0, space 0, times 0 [ 927.096965][T27228] CPU: 0 PID: 27228 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 927.105694][T27228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.116561][T27228] Call Trace: [ 927.119875][T27228] dump_stack+0x197/0x210 [ 927.124258][T27228] should_fail.cold+0x5/0xd [ 927.128805][T27228] ? fault_create_debugfs_attr+0x140/0x140 [ 927.134643][T27228] ? ___might_sleep+0x163/0x2c0 [ 927.139523][T27228] __should_failslab+0xb7/0x100 [ 927.144399][T27228] should_failslab+0x9/0x14 [ 927.149041][T27228] kmem_cache_alloc_trace+0x2d3/0x790 [ 927.154433][T27228] ? trace_hardirqs_on+0x67/0x240 [ 927.159857][T27228] ? cma_ib_req_handler+0x54e0/0x54e0 [ 927.165261][T27228] iw_create_cm_id+0x57/0x3a0 [ 927.169968][T27228] rdma_listen+0x48c/0x970 [ 927.174407][T27228] cma_listen_on_dev+0x530/0x6a0 [ 927.179389][T27228] rdma_listen+0x772/0x970 [ 927.183828][T27228] ? _raw_spin_unlock+0x28/0x40 [ 927.188708][T27228] ucma_listen+0x14d/0x1c0 [ 927.193163][T27228] ? ucma_notify+0x190/0x190 [ 927.197773][T27228] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 927.204127][T27228] ? _copy_from_user+0x12c/0x1a0 [ 927.209471][T27228] ucma_write+0x2d7/0x3c0 [ 927.213819][T27228] ? ucma_notify+0x190/0x190 [ 927.216229][T27242] IPVS: ftp: loaded support on port[0] = 21 [ 927.218438][T27228] ? ucma_open+0x290/0x290 [ 927.218465][T27228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 927.218483][T27228] ? security_file_permission+0x8f/0x380 [ 927.218507][T27228] ? rcu_read_lock_bh_held+0xb0/0xb0 17:12:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 927.245995][T27228] __vfs_write+0x8a/0x110 [ 927.250437][T27228] ? ucma_open+0x290/0x290 [ 927.254875][T27228] vfs_write+0x268/0x5d0 [ 927.259284][T27228] ksys_write+0x220/0x290 [ 927.263743][T27228] ? __ia32_sys_read+0xb0/0xb0 [ 927.268529][T27228] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.274006][T27228] ? do_syscall_64+0x26/0x790 [ 927.278708][T27228] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.284798][T27228] ? do_syscall_64+0x26/0x790 [ 927.289656][T27228] __x64_sys_write+0x73/0xb0 [ 927.294263][T27228] do_syscall_64+0xfa/0x790 [ 927.298802][T27228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.304710][T27228] RIP: 0033:0x45c449 [ 927.308628][T27228] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.328417][T27228] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.336844][T27228] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 927.344829][T27228] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 927.352820][T27228] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 927.360805][T27228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 927.368789][T27228] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000008 [ 927.386375][T27228] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 [ 927.405196][T27249] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 927.415519][T27249] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 17:12:56 executing program 1 (fault-call:3 fault-nth:9): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) [ 927.504058][T27227] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 927.617897][T27254] FAULT_INJECTION: forcing a failure. [ 927.617897][T27254] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 927.631176][T27254] CPU: 1 PID: 27254 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 927.640111][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.650184][T27254] Call Trace: [ 927.653490][T27254] dump_stack+0x197/0x210 [ 927.657845][T27254] should_fail.cold+0x5/0xd [ 927.662460][T27254] ? __lock_acquire+0x8a0/0x4a00 [ 927.667394][T27254] ? fault_create_debugfs_attr+0x140/0x140 [ 927.673422][T27254] ? is_bpf_image_address+0x1b8/0x290 [ 927.680200][T27254] should_fail_alloc_page+0x50/0x60 [ 927.685395][T27254] __alloc_pages_nodemask+0x1a1/0x910 [ 927.690784][T27254] ? __alloc_pages_slowpath+0x2900/0x2900 [ 927.696538][T27254] ? __kasan_check_read+0x11/0x20 [ 927.701585][T27254] ? fault_create_debugfs_attr+0x140/0x140 [ 927.707413][T27254] cache_grow_begin+0x90/0xc60 [ 927.712182][T27254] ? trace_hardirqs_off+0x62/0x240 [ 927.717360][T27254] kmem_cache_alloc+0x64e/0x710 [ 927.720092][T27235] IPVS: ftp: loaded support on port[0] = 21 [ 927.722249][T27254] ? arch_stack_walk+0x97/0xf0 [ 927.722310][T27254] xas_alloc+0x346/0x460 [ 927.737479][T27254] xas_create+0x5b2/0x1060 [ 927.741941][T27254] xas_store+0x9a/0x1a00 [ 927.746206][T27254] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 927.751969][T27254] ? xas_find_marked+0x365/0xf00 [ 927.757086][T27254] ? __kasan_check_read+0x11/0x20 [ 927.762148][T27254] __xa_alloc+0x243/0x3b0 [ 927.766527][T27254] ? xas_find_marked+0xf00/0xf00 [ 927.771481][T27254] ? trace_hardirqs_on+0x67/0x240 [ 927.776643][T27254] ? mark_held_locks+0xf0/0xf0 [ 927.781435][T27254] __xa_alloc_cyclic+0x119/0x390 [ 927.786448][T27254] ? __xa_alloc+0x3b0/0x3b0 [ 927.790986][T27254] rdma_restrack_add+0x193/0x3f0 [ 927.795955][T27254] rdma_restrack_uadd+0x12b/0x160 [ 927.800992][T27254] _cma_attach_to_dev+0x25a/0x2f0 [ 927.806043][T27254] cma_listen_on_dev+0x252/0x6a0 [ 927.810998][T27254] rdma_listen+0x772/0x970 [ 927.815432][T27254] ? _raw_spin_unlock+0x28/0x40 [ 927.820308][T27254] ucma_listen+0x14d/0x1c0 [ 927.824746][T27254] ? ucma_notify+0x190/0x190 [ 927.829361][T27254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 927.835617][T27254] ? _copy_from_user+0x12c/0x1a0 [ 927.840583][T27254] ucma_write+0x2d7/0x3c0 [ 927.844938][T27254] ? ucma_notify+0x190/0x190 [ 927.849560][T27254] ? ucma_open+0x290/0x290 [ 927.853999][T27254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 927.860241][T27254] ? security_file_permission+0x8f/0x380 [ 927.865995][T27254] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 927.871303][T27254] __vfs_write+0x8a/0x110 [ 927.875650][T27254] ? ucma_open+0x290/0x290 [ 927.880085][T27254] vfs_write+0x268/0x5d0 [ 927.884450][T27254] ksys_write+0x220/0x290 [ 927.888783][T27254] ? __ia32_sys_read+0xb0/0xb0 [ 927.893575][T27254] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.899140][T27254] ? do_syscall_64+0x26/0x790 [ 927.903808][T27254] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.909865][T27254] ? do_syscall_64+0x26/0x790 [ 927.914682][T27254] __x64_sys_write+0x73/0xb0 [ 927.919425][T27254] do_syscall_64+0xfa/0x790 [ 927.923957][T27254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.929845][T27254] RIP: 0033:0x45c449 [ 927.933736][T27254] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.953464][T27254] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.961865][T27254] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 927.969822][T27254] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 927.977794][T27254] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 927.985756][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 927.993722][T27254] R13: 0000000000000cbe R14: 00000000004cea14 R15: 0000000000000009 [ 928.038873][T27254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a49008003001700d1bd", 0x33fe0}], 0x1}, 0x0) 17:12:57 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_REJECT(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4) unshare(0x40000000) 17:12:57 executing program 1 (fault-call:3 fault-nth:10): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 929.097670][T27271] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 929.111979][T27269] FAULT_INJECTION: forcing a failure. [ 929.111979][T27269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 929.125215][T27269] CPU: 1 PID: 27269 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 929.133899][T27269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.145097][T27269] Call Trace: [ 929.148420][T27269] dump_stack+0x197/0x210 [ 929.152899][T27269] should_fail.cold+0x5/0xd [ 929.157423][T27269] ? xas_store+0x9a/0x1a00 [ 929.161890][T27269] ? fault_create_debugfs_attr+0x140/0x140 [ 929.167758][T27269] ? rdma_listen+0x772/0x970 [ 929.172374][T27269] ? ucma_listen+0x14d/0x1c0 [ 929.176994][T27269] ? ucma_write+0x2d7/0x3c0 [ 929.181523][T27269] ? __vfs_write+0x8a/0x110 [ 929.185448][T27271] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 929.186163][T27269] ? vfs_write+0x268/0x5d0 [ 929.186179][T27269] ? ksys_write+0x220/0x290 [ 929.186194][T27269] ? __x64_sys_write+0x73/0xb0 [ 929.186217][T27269] ? do_syscall_64+0xfa/0x790 [ 929.213902][T27269] should_fail_alloc_page+0x50/0x60 [ 929.219120][T27269] __alloc_pages_nodemask+0x1a1/0x910 [ 929.224527][T27269] ? __alloc_pages_slowpath+0x2900/0x2900 [ 929.230251][T27269] ? __kasan_check_read+0x11/0x20 [ 929.235308][T27269] ? fault_create_debugfs_attr+0x140/0x140 [ 929.241455][T27269] cache_grow_begin+0x90/0xc60 [ 929.246283][T27269] ? trace_hardirqs_off+0x62/0x240 [ 929.251528][T27269] kmem_cache_alloc+0x64e/0x710 [ 929.256407][T27269] xas_alloc+0x346/0x460 [ 929.260659][T27269] xas_create+0x2cd/0x1060 [ 929.265130][T27269] xas_store+0x9a/0x1a00 [ 929.269390][T27269] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 929.275917][T27269] ? xas_find_marked+0x365/0xf00 [ 929.280866][T27269] ? __kasan_check_read+0x11/0x20 [ 929.286015][T27269] __xa_alloc+0x243/0x3b0 [ 929.290388][T27269] ? xas_find_marked+0xf00/0xf00 [ 929.295335][T27269] ? trace_hardirqs_on+0x67/0x240 [ 929.300403][T27269] ? mark_held_locks+0xf0/0xf0 [ 929.305236][T27269] __xa_alloc_cyclic+0x119/0x390 [ 929.310208][T27269] ? __xa_alloc+0x3b0/0x3b0 [ 929.314751][T27269] rdma_restrack_add+0x193/0x3f0 [ 929.319731][T27269] rdma_restrack_uadd+0x12b/0x160 [ 929.324764][T27269] _cma_attach_to_dev+0x25a/0x2f0 [ 929.329831][T27269] cma_listen_on_dev+0x252/0x6a0 [ 929.334781][T27269] rdma_listen+0x772/0x970 [ 929.339322][T27269] ? _raw_spin_unlock+0x28/0x40 [ 929.344237][T27269] ucma_listen+0x14d/0x1c0 [ 929.348679][T27269] ? ucma_notify+0x190/0x190 [ 929.353289][T27269] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 929.359560][T27269] ? _copy_from_user+0x12c/0x1a0 [ 929.364532][T27269] ucma_write+0x2d7/0x3c0 [ 929.368878][T27269] ? ucma_notify+0x190/0x190 [ 929.373493][T27269] ? ucma_open+0x290/0x290 [ 929.377922][T27269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 929.384180][T27269] ? security_file_permission+0x8f/0x380 [ 929.389835][T27269] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 929.395149][T27269] __vfs_write+0x8a/0x110 [ 929.399480][T27269] ? ucma_open+0x290/0x290 [ 929.403918][T27269] vfs_write+0x268/0x5d0 [ 929.408226][T27269] ksys_write+0x220/0x290 [ 929.412599][T27269] ? __ia32_sys_read+0xb0/0xb0 [ 929.417383][T27269] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.422847][T27269] ? do_syscall_64+0x26/0x790 [ 929.431936][T27269] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.438255][T27269] ? do_syscall_64+0x26/0x790 [ 929.442951][T27269] __x64_sys_write+0x73/0xb0 [ 929.447549][T27269] do_syscall_64+0xfa/0x790 [ 929.452255][T27269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.458222][T27269] RIP: 0033:0x45c449 [ 929.462134][T27269] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.481946][T27269] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.490378][T27269] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 929.498639][T27269] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 929.506622][T27269] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 929.514598][T27269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 929.522600][T27269] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000a [ 929.566084][T27269] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 929.590022][T27278] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 929.603231][T27264] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 17:12:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x48}}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 929.624452][T27279] IPVS: ftp: loaded support on port[0] = 21 [ 929.632692][T27278] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:58 executing program 1 (fault-call:3 fault-nth:11): ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:12:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370a4a008003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 929.853465][T27287] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 929.882499][T27286] FAULT_INJECTION: forcing a failure. [ 929.882499][T27286] name failslab, interval 1, probability 0, space 0, times 0 [ 929.904483][T27287] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 929.906961][T27286] CPU: 0 PID: 27286 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 929.922606][T27286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.930973][T27292] IPVS: ftp: loaded support on port[0] = 21 [ 929.932661][T27286] Call Trace: [ 929.932692][T27286] dump_stack+0x197/0x210 [ 929.932730][T27286] should_fail.cold+0x5/0xd [ 929.950757][T27286] ? fault_create_debugfs_attr+0x140/0x140 [ 929.956591][T27286] ? ___might_sleep+0x163/0x2c0 [ 929.961473][T27286] __should_failslab+0xb7/0x100 [ 929.966346][T27286] should_failslab+0x9/0x14 [ 929.970856][T27286] kmem_cache_alloc_trace+0x2d3/0x790 [ 929.976250][T27286] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 929.982087][T27286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 929.988771][T27286] ? put_work+0x126/0x180 [ 929.993108][T27286] alloc_work_entries+0xaf/0x240 [ 929.998176][T27286] iw_cm_listen+0x47/0x1f0 [ 930.002612][T27286] rdma_listen+0x613/0x970 [ 930.007068][T27286] cma_listen_on_dev+0x530/0x6a0 [ 930.012043][T27286] rdma_listen+0x772/0x970 [ 930.016466][T27286] ? _raw_spin_unlock+0x28/0x40 [ 930.021336][T27286] ucma_listen+0x14d/0x1c0 [ 930.025783][T27286] ? ucma_notify+0x190/0x190 [ 930.030394][T27286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 930.036637][T27286] ? _copy_from_user+0x12c/0x1a0 [ 930.041608][T27286] ucma_write+0x2d7/0x3c0 [ 930.046054][T27286] ? ucma_notify+0x190/0x190 [ 930.050696][T27286] ? ucma_open+0x290/0x290 [ 930.055156][T27286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.061430][T27286] ? security_file_permission+0x8f/0x380 [ 930.067233][T27286] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 930.072550][T27286] __vfs_write+0x8a/0x110 [ 930.076899][T27286] ? ucma_open+0x290/0x290 [ 930.081751][T27286] vfs_write+0x268/0x5d0 [ 930.086034][T27286] ksys_write+0x220/0x290 [ 930.090373][T27286] ? __ia32_sys_read+0xb0/0xb0 [ 930.095157][T27286] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.101162][T27286] ? do_syscall_64+0x26/0x790 [ 930.105842][T27286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.111974][T27286] ? do_syscall_64+0x26/0x790 [ 930.116715][T27286] __x64_sys_write+0x73/0xb0 [ 930.121331][T27286] do_syscall_64+0xfa/0x790 [ 930.125889][T27286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.131793][T27286] RIP: 0033:0x45c449 [ 930.135698][T27286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 930.155318][T27286] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 930.163735][T27286] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 930.171866][T27286] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 930.179837][T27286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 930.188054][T27286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 930.196174][T27286] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000b [ 930.224718][T27286] ================================================================== [ 930.233453][T27286] BUG: KASAN: use-after-free in iwcm_deref_id+0x1d3/0x1e0 [ 930.240684][T27286] Read of size 8 at addr ffff888016c1ed78 by task syz-executor.1/27286 [ 930.248924][T27286] [ 930.251270][T27286] CPU: 0 PID: 27286 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 930.260100][T27286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.270380][T27286] Call Trace: [ 930.273690][T27286] dump_stack+0x197/0x210 [ 930.278046][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.282844][T27286] print_address_description.constprop.0.cold+0xd4/0x30b [ 930.289889][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.295039][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.299832][T27286] __kasan_report.cold+0x1b/0x32 [ 930.304799][T27286] ? destroy_cm_id+0x1b0/0x540 [ 930.309579][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.314378][T27286] kasan_report+0x12/0x20 [ 930.318729][T27286] __asan_report_load8_noabort+0x14/0x20 [ 930.324381][T27286] iwcm_deref_id+0x1d3/0x1e0 [ 930.329007][T27286] destroy_cm_id+0x27c/0x540 [ 930.333710][T27286] ? rem_ref+0x20/0x20 [ 930.337824][T27286] ? alloc_work_entries+0x12a/0x240 [ 930.343084][T27286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.349448][T27286] iw_destroy_cm_id+0x16/0x20 [ 930.354190][T27286] rdma_listen+0x656/0x970 [ 930.358636][T27286] cma_listen_on_dev+0x530/0x6a0 [ 930.363643][T27286] rdma_listen+0x772/0x970 [ 930.368081][T27286] ? _raw_spin_unlock+0x28/0x40 [ 930.372958][T27286] ucma_listen+0x14d/0x1c0 [ 930.377391][T27286] ? ucma_notify+0x190/0x190 [ 930.382170][T27286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 930.388430][T27286] ? _copy_from_user+0x12c/0x1a0 [ 930.393397][T27286] ucma_write+0x2d7/0x3c0 [ 930.397767][T27286] ? ucma_notify+0x190/0x190 [ 930.402384][T27286] ? ucma_open+0x290/0x290 [ 930.406827][T27286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.414060][T27286] ? security_file_permission+0x8f/0x380 [ 930.419725][T27286] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 930.425130][T27286] __vfs_write+0x8a/0x110 [ 930.429484][T27286] ? ucma_open+0x290/0x290 [ 930.433932][T27286] vfs_write+0x268/0x5d0 [ 930.438211][T27286] ksys_write+0x220/0x290 [ 930.442640][T27286] ? __ia32_sys_read+0xb0/0xb0 [ 930.447445][T27286] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.452924][T27286] ? do_syscall_64+0x26/0x790 [ 930.457804][T27286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.463911][T27286] ? do_syscall_64+0x26/0x790 [ 930.468616][T27286] __x64_sys_write+0x73/0xb0 17:12:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:12:59 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0908, 0xf, [], @string=&(0x7f00000000c0)=0x3}}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x5) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x1ff, 0x109b, 0x1f61, 0xbe, 0x5}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 930.473417][T27286] do_syscall_64+0xfa/0x790 [ 930.477953][T27286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.483859][T27286] RIP: 0033:0x45c449 [ 930.487767][T27286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 930.507378][T27286] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 930.515810][T27286] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 930.523913][T27286] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 930.531888][T27286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 930.540013][T27286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 930.548018][T27286] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000b [ 930.556014][T27286] [ 930.558410][T27286] Allocated by task 27286: [ 930.562832][T27286] save_stack+0x23/0x90 [ 930.567043][T27286] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 930.572784][T27286] kasan_kmalloc+0x9/0x10 [ 930.577129][T27286] kmem_cache_alloc_trace+0x158/0x790 [ 930.582601][T27286] alloc_work_entries+0xaf/0x240 [ 930.587773][T27286] iw_cm_listen+0x47/0x1f0 [ 930.592211][T27286] rdma_listen+0x613/0x970 [ 930.596774][T27286] cma_listen_on_dev+0x530/0x6a0 [ 930.601714][T27286] rdma_listen+0x772/0x970 [ 930.606142][T27286] ucma_listen+0x14d/0x1c0 [ 930.610597][T27286] ucma_write+0x2d7/0x3c0 [ 930.614927][T27286] __vfs_write+0x8a/0x110 [ 930.619398][T27286] vfs_write+0x268/0x5d0 [ 930.623651][T27286] ksys_write+0x220/0x290 [ 930.627990][T27286] __x64_sys_write+0x73/0xb0 [ 930.632595][T27286] do_syscall_64+0xfa/0x790 [ 930.636247][T27303] IPVS: ftp: loaded support on port[0] = 21 [ 930.637106][T27286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.637137][T27286] [ 930.637145][T27286] Freed by task 27286: [ 930.637161][T27286] save_stack+0x23/0x90 [ 930.637175][T27286] __kasan_slab_free+0x102/0x150 [ 930.637188][T27286] kasan_slab_free+0xe/0x10 [ 930.637199][T27286] kfree+0x10a/0x2c0 [ 930.637221][T27286] alloc_work_entries+0x1e6/0x240 [ 930.678073][T27286] iw_cm_listen+0x47/0x1f0 [ 930.682612][T27286] rdma_listen+0x613/0x970 [ 930.687043][T27286] cma_listen_on_dev+0x530/0x6a0 [ 930.691997][T27286] rdma_listen+0x772/0x970 [ 930.696421][T27286] ucma_listen+0x14d/0x1c0 [ 930.700858][T27286] ucma_write+0x2d7/0x3c0 [ 930.705205][T27286] __vfs_write+0x8a/0x110 [ 930.709667][T27286] vfs_write+0x268/0x5d0 [ 930.713923][T27286] ksys_write+0x220/0x290 [ 930.718281][T27286] __x64_sys_write+0x73/0xb0 [ 930.723042][T27286] do_syscall_64+0xfa/0x790 [ 930.727617][T27286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.733618][T27286] [ 930.735963][T27286] The buggy address belongs to the object at ffff888016c1ec00 [ 930.735963][T27286] which belongs to the cache kmalloc-512 of size 512 [ 930.750152][T27286] The buggy address is located 376 bytes inside of [ 930.750152][T27286] 512-byte region [ffff888016c1ec00, ffff888016c1ee00) [ 930.763538][T27286] The buggy address belongs to the page: [ 930.769276][T27286] page:ffffea00005b0780 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0 [ 930.778577][T27286] flags: 0xfffe0000000200(slab) [ 930.783450][T27286] raw: 00fffe0000000200 ffffea000246b548 ffffea0000503048 ffff8880aa400a80 [ 930.792562][T27286] raw: 0000000000000000 ffff888016c1e000 0000000100000004 0000000000000000 [ 930.801262][T27286] page dumped because: kasan: bad access detected [ 930.807680][T27286] [ 930.810040][T27286] Memory state around the buggy address: [ 930.815727][T27286] ffff888016c1ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 930.823874][T27286] ffff888016c1ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 930.832061][T27286] >ffff888016c1ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 930.840239][T27286] ^ [ 930.848227][T27286] ffff888016c1ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 930.856411][T27286] ffff888016c1ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 930.864524][T27286] ================================================================== [ 930.872592][T27286] Disabling lock debugging due to kernel taint [ 930.880267][T27286] Kernel panic - not syncing: panic_on_warn set ... [ 930.886907][T27286] CPU: 1 PID: 27286 Comm: syz-executor.1 Tainted: G B 5.6.0-rc3-syzkaller #0 [ 930.896975][T27286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.907240][T27286] Call Trace: [ 930.910528][T27286] dump_stack+0x197/0x210 [ 930.914889][T27286] panic+0x2e3/0x75c [ 930.918770][T27286] ? add_taint.cold+0x16/0x16 [ 930.923720][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.928578][T27286] ? preempt_schedule+0x4b/0x60 [ 930.933418][T27286] ? ___preempt_schedule+0x16/0x18 [ 930.938525][T27286] ? trace_hardirqs_on+0x5e/0x240 [ 930.943551][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.948462][T27286] end_report+0x47/0x4f [ 930.952618][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.957386][T27286] __kasan_report.cold+0xe/0x32 [ 930.962229][T27286] ? destroy_cm_id+0x1b0/0x540 [ 930.966983][T27286] ? iwcm_deref_id+0x1d3/0x1e0 [ 930.971750][T27286] kasan_report+0x12/0x20 [ 930.976069][T27286] __asan_report_load8_noabort+0x14/0x20 [ 930.981709][T27286] iwcm_deref_id+0x1d3/0x1e0 [ 930.986436][T27286] destroy_cm_id+0x27c/0x540 [ 930.991075][T27286] ? rem_ref+0x20/0x20 [ 930.995349][T27286] ? alloc_work_entries+0x12a/0x240 [ 931.000640][T27286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.006890][T27286] iw_destroy_cm_id+0x16/0x20 [ 931.011624][T27286] rdma_listen+0x656/0x970 [ 931.016064][T27286] cma_listen_on_dev+0x530/0x6a0 [ 931.021037][T27286] rdma_listen+0x772/0x970 [ 931.025487][T27286] ? _raw_spin_unlock+0x28/0x40 [ 931.030432][T27286] ucma_listen+0x14d/0x1c0 [ 931.034831][T27286] ? ucma_notify+0x190/0x190 [ 931.039532][T27286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 931.045761][T27286] ? _copy_from_user+0x12c/0x1a0 [ 931.050694][T27286] ucma_write+0x2d7/0x3c0 [ 931.055053][T27286] ? ucma_notify+0x190/0x190 [ 931.059820][T27286] ? ucma_open+0x290/0x290 [ 931.064252][T27286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.070479][T27286] ? security_file_permission+0x8f/0x380 [ 931.076114][T27286] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 931.081600][T27286] __vfs_write+0x8a/0x110 [ 931.085933][T27286] ? ucma_open+0x290/0x290 [ 931.090349][T27286] vfs_write+0x268/0x5d0 [ 931.094673][T27286] ksys_write+0x220/0x290 [ 931.098996][T27286] ? __ia32_sys_read+0xb0/0xb0 [ 931.103886][T27286] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.109339][T27286] ? do_syscall_64+0x26/0x790 [ 931.114004][T27286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.120214][T27286] ? do_syscall_64+0x26/0x790 [ 931.124885][T27286] __x64_sys_write+0x73/0xb0 [ 931.129488][T27286] do_syscall_64+0xfa/0x790 [ 931.134117][T27286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.140008][T27286] RIP: 0033:0x45c449 [ 931.143887][T27286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 931.163496][T27286] RSP: 002b:00007f2a6c780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.172025][T27286] RAX: ffffffffffffffda RBX: 00007f2a6c7816d4 RCX: 000000000045c449 [ 931.180113][T27286] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 931.188223][T27286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 931.196453][T27286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 931.204411][T27286] R13: 0000000000000cbe R14: 00000000004cea14 R15: 000000000000000b [ 931.214552][T27286] Kernel Offset: disabled [ 931.219283][T27286] Rebooting in 86400 seconds..