er: 7958:7983 ioctl 40046207 0 returned -16 09:14:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/9, 0x9}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000400), &(0x7f0000000380)=0x4) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r1}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:14:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x32ddb27}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x817f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x53}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb5d}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x11) r1 = io_uring_setup(0x65, &(0x7f0000000040)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000240)=0x4) fcntl$getflags(r1, 0x408) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x3, 0x0, 0x4000) 09:14:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x7000000, 0x8, 0x0, 0xc5}) 09:14:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 558.852640][ T8006] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 558.904226][ T8006] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:14:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 558.951913][ T8011] binder: BINDER_SET_CONTEXT_MGR already set [ 558.968848][ T8011] binder: 8002:8011 ioctl 40046207 0 returned -16 09:14:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x8000000, 0x8, 0x0, 0xc5}) 09:14:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="d217352011aae19c6a1702dd55122e39e7fdeff792cd7acf36432c88337625ec26f80822e7687042e0bf72f69c7200bc429a96cc6aff8140e793696ba2d7955ba469e607f02bab2d00c2c7bc060bcf8e3a2ec951f6848d8ce764ce0b33c85078342d4e20844baa13a4a5e0a39dd57b820c221f4d0e348fe618d45b2582c775a8c3701465455fd7d59106145220b9a6da5c8fabad7b49cb8ac25d64705ca45c25a12a9eacd0e25466880fc42876c7eae08697d323b3adc42cf1095b3f83bb950857047cc066cba9b01e09d5d4d704096144ee18750a51528123433d7020f0df6fd8e31f8313e6034c2db253fd104aea02d850fe01ce694f6852b7029cb59d0d85de7e47d80878ebd00468714d725f23487ccdec2b04a898e98712fd7c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r1}, 0x0) write(r0, &(0x7f00000003c0)="d1d545c033e983ecb41ea2a78676be60b0435309c0426adf63218cccbe3c497756492d300f412bea9695656ae19949a6cb966588a73edbcceb95d4b71b4d1853c8b5c9b8eaa57a689bda81f14afbe3fe0e2d055d3cdb5067a55a8d23b9b519d12ea4ce305920024e33c2e064f28a8a2127dbca782d56f27707a315ff1aad0d02e5b1d537abe0ca948d15628c526f213336437a5358be49db31d419981a8c6025cc7617c1d2374d2542d4df0120bd86b4f0198f2a2873b2c3c29d59", 0xbb) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:14:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 559.116026][ T8006] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 559.128983][ T8019] binder: BINDER_SET_CONTEXT_MGR already set [ 559.142790][ T8019] binder: 8002:8019 ioctl 40046207 0 returned -16 09:14:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 559.173511][ T8006] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:14:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0xb000000, 0x8, 0x0, 0xc5}) 09:14:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/9, 0x9}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000400), &(0x7f0000000380)=0x4) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r1}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:14:55 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:55 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x17000000, 0x8, 0x0, 0xc5}) 09:14:55 executing program 2: io_uring_setup(0x65, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000000)={0x2, 0x0, [0x8d7, 0x7fff, 0x1, 0xfff, 0x4, 0x59021fce, 0x2]}) 09:14:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:14:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x3b000000, 0x8, 0x0, 0xc5}) 09:14:55 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:55 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 559.666573][ T8075] binder: BINDER_SET_CONTEXT_MGR already set [ 559.692026][ T8075] binder: 8061:8075 ioctl 40046207 0 returned -16 09:14:55 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x3f000000, 0x8, 0x0, 0xc5}) 09:14:55 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 559.789587][ T8090] binder: 8061:8090 ioctl c028564d 20000000 returned -22 09:14:56 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:56 executing program 2: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x300}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r2 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x3, 0x0, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x120, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0xd2, 0xfc, 0x3, 0xff, 0x2}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000000180)=0x80000000, 0x4) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000) 09:14:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0xff000000, 0x8, 0x0, 0xc5}) 09:14:56 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:56 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040000000076407b56b00000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 559.966916][ T8114] FAULT_INJECTION: forcing a failure. [ 559.966916][ T8114] name failslab, interval 1, probability 0, space 0, times 0 09:14:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 560.053286][ T8114] CPU: 0 PID: 8114 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 560.063470][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.075364][ T8114] Call Trace: [ 560.078670][ T8114] dump_stack+0x188/0x20d [ 560.083027][ T8114] should_fail.cold+0x5/0x14 [ 560.087658][ T8114] ? setup_fault_attr+0x1e0/0x1e0 [ 560.092795][ T8114] should_failslab+0x5/0xf [ 560.097225][ T8114] __kmalloc+0x2d9/0x7a0 [ 560.101481][ T8114] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 560.107752][ T8114] ? tomoyo_realpath_from_path+0xc2/0x620 [ 560.113575][ T8114] ? lock_release+0x800/0x800 [ 560.118264][ T8114] ? __lock_acquire+0xcbb/0x4c50 [ 560.123394][ T8114] tomoyo_realpath_from_path+0xc2/0x620 [ 560.129302][ T8114] ? tomoyo_profile+0x42/0x50 [ 560.133991][ T8114] tomoyo_path_number_perm+0x1c2/0x4d0 [ 560.139457][ T8114] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 560.145112][ T8114] ? tomoyo_execute_permission+0x470/0x470 09:14:56 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, 0x0) [ 560.151222][ T8114] ? __bfs+0x520/0x520 [ 560.155301][ T8114] ? __bfs+0x520/0x520 [ 560.159395][ T8114] ? __fget_files+0x30d/0x500 [ 560.164118][ T8114] ? __fget_files+0x32f/0x500 [ 560.168815][ T8114] ? do_dup2+0x520/0x520 [ 560.173239][ T8114] ? __sb_end_write+0x101/0x1d0 [ 560.178105][ T8114] ? vfs_write+0x161/0x5d0 [ 560.182540][ T8114] security_file_ioctl+0x6c/0xb0 [ 560.187583][ T8114] ksys_ioctl+0x50/0x180 [ 560.191930][ T8114] __x64_sys_ioctl+0x6f/0xb0 [ 560.196623][ T8114] ? lockdep_hardirqs_on+0x463/0x620 [ 560.201925][ T8114] do_syscall_64+0xf6/0x7d0 [ 560.206629][ T8114] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 560.213001][ T8114] RIP: 0033:0x7f655cbe8469 [ 560.217536][ T8114] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 560.238753][ T8114] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.243809][ T8122] binder: BINDER_SET_CONTEXT_MGR already set [ 560.247166][ T8114] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007f655cbe8469 [ 560.247177][ T8114] RDX: 0000000020000380 RSI: 0000000040247007 RDI: 0000000000000003 [ 560.247187][ T8114] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 560.247196][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 560.247206][ T8114] R13: 000000000000045e R14: 00000000004196ba R15: 00007f655d2d95c0 09:14:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 560.311175][ T8114] ERROR: Out of memory at tomoyo_realpath_from_path. 09:14:56 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:14:56 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, 0x0) 09:14:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0xffffff7f, 0x8, 0x0, 0xc5}) [ 560.504274][ T8122] binder: 8116:8122 ioctl 40046207 0 returned -16 [ 560.524317][ T8145] FAULT_INJECTION: forcing a failure. [ 560.524317][ T8145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.538072][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 560.548267][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.559135][ T8145] Call Trace: [ 560.562445][ T8145] dump_stack+0x188/0x20d [ 560.567057][ T8145] should_fail.cold+0x5/0x14 [ 560.572755][ T8145] ? setup_fault_attr+0x1e0/0x1e0 [ 560.577979][ T8145] ? print_usage_bug+0x240/0x240 [ 560.583064][ T8145] __alloc_pages_nodemask+0x17a/0x810 [ 560.588547][ T8145] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 560.596150][ T8145] ? mark_held_locks+0xe0/0xe0 [ 560.601091][ T8145] ? print_usage_bug+0x240/0x240 [ 560.606138][ T8145] cache_grow_begin+0x8c/0xc10 [ 560.611269][ T8145] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 560.617432][ T8145] __kmalloc+0x6dc/0x7a0 [ 560.621893][ T8145] ? tomoyo_realpath_from_path+0xc2/0x620 [ 560.628267][ T8145] ? lock_release+0x800/0x800 [ 560.633223][ T8145] ? __lock_acquire+0xcbb/0x4c50 [ 560.638222][ T8145] tomoyo_realpath_from_path+0xc2/0x620 [ 560.643872][ T8145] ? tomoyo_profile+0x42/0x50 [ 560.648582][ T8145] tomoyo_path_number_perm+0x1c2/0x4d0 [ 560.654917][ T8145] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 560.661466][ T8145] ? tomoyo_execute_permission+0x470/0x470 [ 560.668792][ T8145] ? __bfs+0x520/0x520 [ 560.673050][ T8145] ? __bfs+0x520/0x520 [ 560.677350][ T8145] ? __fget_files+0x30d/0x500 [ 560.682431][ T8145] ? __fget_files+0x32f/0x500 [ 560.688630][ T8145] ? do_dup2+0x520/0x520 [ 560.693421][ T8145] ? __sb_end_write+0x101/0x1d0 [ 560.698841][ T8145] ? vfs_write+0x161/0x5d0 [ 560.703732][ T8145] security_file_ioctl+0x6c/0xb0 [ 560.709372][ T8145] ksys_ioctl+0x50/0x180 [ 560.714292][ T8145] __x64_sys_ioctl+0x6f/0xb0 [ 560.719244][ T8145] ? lockdep_hardirqs_on+0x463/0x620 [ 560.725163][ T8145] do_syscall_64+0xf6/0x7d0 [ 560.730855][ T8145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 560.737106][ T8145] RIP: 0033:0x7f655cbe8469 [ 560.741711][ T8145] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 560.765240][ T8145] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.774037][ T8145] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007f655cbe8469 [ 560.782025][ T8145] RDX: 0000000020000380 RSI: 0000000040247007 RDI: 0000000000000003 [ 560.790012][ T8145] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 09:14:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, 0xc5}) 09:14:57 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 560.798364][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 560.806351][ T8145] R13: 000000000000045e R14: 00000000004196ba R15: 00007f655d2d95c0 09:14:57 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x79d, 0x200a00) 09:14:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x0, 0xc5}) 09:14:57 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:14:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040000000076407b56b00000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:14:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, 0x0) 09:14:57 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:14:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10, 0x0, 0xc5}) 09:14:57 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) socket$inet(0x2, 0x80000, 0x9) 09:14:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}) [ 561.164019][ T8183] FAULT_INJECTION: forcing a failure. [ 561.164019][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 561.209671][ T8183] CPU: 0 PID: 8183 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 561.219521][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.230106][ T8183] Call Trace: [ 561.233416][ T8183] dump_stack+0x188/0x20d [ 561.237951][ T8183] should_fail.cold+0x5/0x14 [ 561.242736][ T8183] ? setup_fault_attr+0x1e0/0x1e0 [ 561.247790][ T8183] should_failslab+0x5/0xf [ 561.252220][ T8183] __kmalloc+0x2d9/0x7a0 09:14:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}) [ 561.256492][ T8183] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 561.261875][ T8183] ? d_absolute_path+0x10c/0x160 [ 561.266842][ T8183] ? __d_path+0x140/0x140 [ 561.271192][ T8183] tomoyo_encode2.part.0+0xec/0x3b0 [ 561.276494][ T8183] tomoyo_encode+0x28/0x50 [ 561.282055][ T8183] tomoyo_realpath_from_path+0x184/0x620 [ 561.287970][ T8183] tomoyo_path_number_perm+0x1c2/0x4d0 [ 561.293443][ T8183] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 561.299364][ T8183] ? tomoyo_execute_permission+0x470/0x470 [ 561.305266][ T8183] ? __bfs+0x520/0x520 [ 561.309351][ T8183] ? __bfs+0x520/0x520 [ 561.313531][ T8183] ? __fget_files+0x30d/0x500 [ 561.318505][ T8183] ? __fget_files+0x32f/0x500 [ 561.323302][ T8183] ? do_dup2+0x520/0x520 [ 561.327733][ T8183] ? __sb_end_write+0x101/0x1d0 [ 561.332680][ T8183] ? vfs_write+0x161/0x5d0 [ 561.337381][ T8183] security_file_ioctl+0x6c/0xb0 [ 561.342334][ T8183] ksys_ioctl+0x50/0x180 [ 561.346622][ T8183] __x64_sys_ioctl+0x6f/0xb0 [ 561.351227][ T8183] ? lockdep_hardirqs_on+0x463/0x620 [ 561.356893][ T8183] do_syscall_64+0xf6/0x7d0 [ 561.361635][ T8183] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 561.367725][ T8183] RIP: 0033:0x7f655cbe8469 [ 561.372242][ T8183] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 561.391946][ T8183] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.400373][ T8183] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007f655cbe8469 09:14:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}) [ 561.408528][ T8183] RDX: 0000000020000380 RSI: 0000000040247007 RDI: 0000000000000003 [ 561.416601][ T8183] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 561.424580][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 561.432736][ T8183] R13: 000000000000045e R14: 00000000004196ba R15: 00007f655d2d95c0 09:14:57 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x141800, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000000c0)) 09:14:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:14:57 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:14:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040000000076407b56b00000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:14:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 561.671703][ T8183] ERROR: Out of memory at tomoyo_realpath_from_path. 09:14:57 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:14:58 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440009e79bb06af44133a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x5c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x200000000003}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}], 0x0, 0x2, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="044da0a389962f7534f071de630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r7 = accept4$tipc(r6, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x80000000}) 09:14:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x2, 0xc5}) 09:14:58 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 09:14:58 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 561.942382][ T8237] binder: BINDER_SET_CONTEXT_MGR already set [ 561.954627][ T8237] binder: 8233:8237 ioctl 40046207 0 returned -16 09:14:58 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x6, @broadcast}, 0xf2b96ed71a54acfa, {0x2, 0x4e22, @rand_addr=0x64010101}, 'rose0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x80800) 09:14:58 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:14:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3, 0xc5}) [ 562.040665][ T8249] binder: BINDER_SET_CONTEXT_MGR already set [ 562.073465][ T8251] FAULT_INJECTION: forcing a failure. [ 562.073465][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 562.089018][ T8249] binder: 8233:8249 ioctl 40046207 0 returned -16 [ 562.098897][ T8252] binder: 8233:8252 unknown command 323268358 [ 562.111269][ T8252] binder: 8233:8252 ioctl c0306201 20000280 returned -22 [ 562.127651][ T8251] CPU: 1 PID: 8251 Comm: syz-executor.4 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 562.137753][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.147909][ T8251] Call Trace: [ 562.151385][ T8251] dump_stack+0x188/0x20d [ 562.155733][ T8251] should_fail.cold+0x5/0x14 [ 562.160353][ T8251] ? setup_fault_attr+0x1e0/0x1e0 [ 562.165407][ T8251] should_failslab+0x5/0xf [ 562.169917][ T8251] __kmalloc+0x2d9/0x7a0 [ 562.174174][ T8251] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 562.180359][ T8251] ? tomoyo_realpath_from_path+0xc2/0x620 [ 562.186390][ T8251] ? lock_release+0x800/0x800 [ 562.191091][ T8251] ? __lock_acquire+0xcbb/0x4c50 [ 562.196056][ T8251] tomoyo_realpath_from_path+0xc2/0x620 [ 562.202429][ T8251] ? tomoyo_profile+0x42/0x50 [ 562.207131][ T8251] tomoyo_path_number_perm+0x1c2/0x4d0 [ 562.212601][ T8251] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 562.218266][ T8251] ? tomoyo_execute_permission+0x470/0x470 [ 562.224083][ T8251] ? __bfs+0x520/0x520 [ 562.228166][ T8251] ? __bfs+0x520/0x520 [ 562.232264][ T8251] ? __fget_files+0x30d/0x500 [ 562.237080][ T8251] ? __fget_files+0x32f/0x500 [ 562.241860][ T8251] ? do_dup2+0x520/0x520 [ 562.246131][ T8251] ? __sb_end_write+0x101/0x1d0 [ 562.251449][ T8251] ? vfs_write+0x161/0x5d0 [ 562.256155][ T8251] security_file_ioctl+0x6c/0xb0 [ 562.261138][ T8251] ksys_ioctl+0x50/0x180 [ 562.267048][ T8251] __x64_sys_ioctl+0x6f/0xb0 [ 562.272783][ T8251] ? lockdep_hardirqs_on+0x463/0x620 [ 562.278105][ T8251] do_syscall_64+0xf6/0x7d0 [ 562.282897][ T8251] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 562.288807][ T8251] RIP: 0033:0x7ffbf2018469 [ 562.293328][ T8251] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 562.313057][ T8251] RSP: 002b:00007ffbf2708db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.321707][ T8251] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007ffbf2018469 [ 562.329954][ T8251] RDX: 0000000020000380 RSI: 0000000000007002 RDI: 0000000000000003 09:14:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4, 0xc5}) 09:14:58 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) inotify_rm_watch(0xffffffffffffffff, r4) inotify_rm_watch(0xffffffffffffffff, r4) inotify_rm_watch(r3, r4) 09:14:58 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) socket(0x0, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040000000076407b56b00000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 562.338647][ T8251] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 562.346640][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 562.354894][ T8251] R13: 000000000000045e R14: 00000000004196ba R15: 00007ffbf27095c0 [ 562.385018][ T8249] binder: BINDER_SET_CONTEXT_MGR already set [ 562.392329][ T8249] binder: 8233:8249 ioctl 40046207 0 returned -16 [ 562.400478][ T8263] binder: BINDER_SET_CONTEXT_MGR already set [ 562.421744][ T8249] binder: 8233:8249 unknown command -1549775612 [ 562.427300][ T8263] binder: 8260:8263 ioctl 40046207 0 returned -16 [ 562.438965][ T8249] binder: 8233:8249 ioctl c0306201 20000200 returned -22 [ 562.457927][ T8264] binder_alloc: 8253: binder_alloc_buf, no vma [ 562.467399][ T8267] binder: BINDER_SET_CONTEXT_MGR already set [ 562.470470][ T8264] binder: 8253:8264 ioctl 8955 20000080 returned -22 09:14:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x5, 0xc5}) [ 562.491192][ T8267] binder: 8260:8267 ioctl 40046207 0 returned -16 [ 562.494991][ T8264] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 562.525868][ T8264] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 562.537219][ T8251] ERROR: Out of memory at tomoyo_realpath_from_path. 09:14:58 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 562.689865][ T8281] FAULT_INJECTION: forcing a failure. [ 562.689865][ T8281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 562.703204][ T8281] CPU: 0 PID: 8281 Comm: syz-executor.4 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 562.713286][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.723708][ T8281] Call Trace: [ 562.727015][ T8281] dump_stack+0x188/0x20d [ 562.731366][ T8281] should_fail.cold+0x5/0x14 [ 562.735968][ T8281] ? setup_fault_attr+0x1e0/0x1e0 [ 562.741088][ T8281] ? print_usage_bug+0x240/0x240 [ 562.746043][ T8281] __alloc_pages_nodemask+0x17a/0x810 [ 562.751442][ T8281] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 562.756442][ T8237] binder: BINDER_SET_CONTEXT_MGR already set [ 562.758308][ T8281] ? mark_held_locks+0xe0/0xe0 [ 562.758326][ T8281] ? print_usage_bug+0x240/0x240 [ 562.758347][ T8281] cache_grow_begin+0x8c/0xc10 [ 562.758367][ T8281] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 562.765584][ T8252] binder: 8233:8252 unknown command 323268358 [ 562.769281][ T8281] __kmalloc+0x6dc/0x7a0 [ 562.769301][ T8281] ? tomoyo_realpath_from_path+0xc2/0x620 [ 562.769322][ T8281] ? lock_release+0x800/0x800 [ 562.780677][ T8237] binder: 8233:8237 ioctl 40046207 0 returned -16 [ 562.786407][ T8281] ? __lock_acquire+0xcbb/0x4c50 [ 562.786435][ T8281] tomoyo_realpath_from_path+0xc2/0x620 [ 562.786452][ T8281] ? tomoyo_profile+0x42/0x50 [ 562.786474][ T8281] tomoyo_path_number_perm+0x1c2/0x4d0 [ 562.786489][ T8281] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 562.786508][ T8281] ? tomoyo_execute_permission+0x470/0x470 [ 562.786520][ T8281] ? __bfs+0x520/0x520 [ 562.786532][ T8281] ? __bfs+0x520/0x520 [ 562.786560][ T8281] ? __fget_files+0x30d/0x500 [ 562.799469][ T8252] binder: 8233:8252 ioctl c0306201 20000280 returned -22 [ 562.803956][ T8281] ? __fget_files+0x32f/0x500 [ 562.803981][ T8281] ? do_dup2+0x520/0x520 [ 562.803994][ T8281] ? __sb_end_write+0x101/0x1d0 [ 562.804011][ T8281] ? vfs_write+0x161/0x5d0 [ 562.804033][ T8281] security_file_ioctl+0x6c/0xb0 [ 562.804056][ T8281] ksys_ioctl+0x50/0x180 [ 562.816447][ T8283] binder: BINDER_SET_CONTEXT_MGR already set [ 562.817297][ T8281] __x64_sys_ioctl+0x6f/0xb0 [ 562.817316][ T8281] ? lockdep_hardirqs_on+0x463/0x620 [ 562.817333][ T8281] do_syscall_64+0xf6/0x7d0 [ 562.817356][ T8281] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 562.825378][ T8285] binder: 8233:8285 unknown command -1549775612 [ 562.828800][ T8281] RIP: 0033:0x7ffbf2018469 [ 562.828819][ T8281] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 562.828828][ T8281] RSP: 002b:00007ffbf2708db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.828843][ T8281] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007ffbf2018469 [ 562.828860][ T8281] RDX: 0000000020000380 RSI: 0000000000007002 RDI: 0000000000000003 [ 562.833871][ T8283] binder: 8233:8283 ioctl 40046207 0 returned -16 [ 562.839163][ T8281] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 562.839173][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 562.839181][ T8281] R13: 000000000000045e R14: 00000000004196ba R15: 00007ffbf27095c0 [ 562.982058][ T8285] binder: 8233:8285 ioctl c0306201 20000200 returned -22 [ 563.040943][ T8273] binder_alloc: 8253: binder_alloc_buf, no vma [ 563.051429][ T8273] binder: 8253:8273 ioctl 8955 20000080 returned -22 [ 563.071445][ T8255] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 563.102242][ T8255] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:14:59 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/autofs\x00', 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a0000000800050002000000"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xdc, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfe00000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) 09:14:59 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40247007, &(0x7f0000000380)) 09:14:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x6, 0xc5}) 09:14:59 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 563.249256][ T8296] FAULT_INJECTION: forcing a failure. [ 563.249256][ T8296] name failslab, interval 1, probability 0, space 0, times 0 [ 563.263683][ T8296] CPU: 0 PID: 8296 Comm: syz-executor.4 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 563.273500][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.283564][ T8296] Call Trace: [ 563.286868][ T8296] dump_stack+0x188/0x20d [ 563.291222][ T8296] should_fail.cold+0x5/0x14 [ 563.295835][ T8296] ? setup_fault_attr+0x1e0/0x1e0 [ 563.300889][ T8296] should_failslab+0x5/0xf [ 563.305345][ T8296] __kmalloc+0x2d9/0x7a0 [ 563.309609][ T8296] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 563.315065][ T8296] ? d_absolute_path+0x10c/0x160 [ 563.320398][ T8296] ? __d_path+0x140/0x140 [ 563.324752][ T8296] tomoyo_encode2.part.0+0xec/0x3b0 [ 563.330081][ T8296] tomoyo_encode+0x28/0x50 [ 563.336366][ T8296] tomoyo_realpath_from_path+0x184/0x620 [ 563.342672][ T8296] tomoyo_path_number_perm+0x1c2/0x4d0 [ 563.348840][ T8296] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 563.354855][ T8296] ? tomoyo_execute_permission+0x470/0x470 [ 563.360676][ T8296] ? __bfs+0x520/0x520 [ 563.364760][ T8296] ? __bfs+0x520/0x520 [ 563.368862][ T8296] ? __fget_files+0x30d/0x500 [ 563.373770][ T8296] ? __fget_files+0x32f/0x500 [ 563.380164][ T8296] ? do_dup2+0x520/0x520 [ 563.384906][ T8296] ? __sb_end_write+0x101/0x1d0 [ 563.390045][ T8296] ? vfs_write+0x161/0x5d0 [ 563.394486][ T8296] security_file_ioctl+0x6c/0xb0 [ 563.399453][ T8296] ksys_ioctl+0x50/0x180 [ 563.403719][ T8296] __x64_sys_ioctl+0x6f/0xb0 [ 563.408751][ T8296] ? lockdep_hardirqs_on+0x463/0x620 [ 563.414249][ T8296] do_syscall_64+0xf6/0x7d0 [ 563.418865][ T8296] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 563.424763][ T8296] RIP: 0033:0x7ffbf2018469 [ 563.429197][ T8296] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 563.449068][ T8296] RSP: 002b:00007ffbf2708db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.457489][ T8296] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007ffbf2018469 [ 563.465470][ T8296] RDX: 0000000020000380 RSI: 0000000000007002 RDI: 0000000000000003 [ 563.473546][ T8296] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 563.481526][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 563.489689][ T8296] R13: 000000000000045e R14: 00000000004196ba R15: 00007ffbf27095c0 09:14:59 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x6180c1, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040084}, 0x8000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000140)=0x5f) 09:14:59 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:14:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x7, 0xc5}) 09:14:59 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x800100a, 0x100, 0x2}) [ 563.549759][ T8296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.617821][ T8302] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 09:14:59 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 563.660734][ T8313] FAULT_INJECTION: forcing a failure. [ 563.660734][ T8313] name failslab, interval 1, probability 0, space 0, times 0 [ 563.681597][ T8302] IPVS: persistence engine module ip_vs_pe_ [ 563.681597][ T8302] ip not found [ 563.716150][ T8313] CPU: 0 PID: 8313 Comm: syz-executor.1 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 563.727039][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.737102][ T8313] Call Trace: [ 563.740411][ T8313] dump_stack+0x188/0x20d [ 563.744936][ T8313] should_fail.cold+0x5/0x14 [ 563.745511][ T8320] binder: BINDER_SET_CONTEXT_MGR already set [ 563.750081][ T8313] ? setup_fault_attr+0x1e0/0x1e0 [ 563.750114][ T8313] should_failslab+0x5/0xf [ 563.750128][ T8313] __kmalloc+0x2d9/0x7a0 [ 563.750151][ T8313] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 563.750175][ T8313] ? tomoyo_realpath_from_path+0xc2/0x620 [ 563.774953][ T8320] binder: 8314:8320 ioctl 40046207 0 returned -16 [ 563.776209][ T8313] ? lock_release+0x800/0x800 [ 563.776226][ T8313] ? __lock_acquire+0xcbb/0x4c50 [ 563.776252][ T8313] tomoyo_realpath_from_path+0xc2/0x620 [ 563.776266][ T8313] ? tomoyo_profile+0x42/0x50 [ 563.776290][ T8313] tomoyo_path_number_perm+0x1c2/0x4d0 [ 563.805385][ T8322] binder: BINDER_SET_CONTEXT_MGR already set [ 563.805979][ T8313] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 563.806003][ T8313] ? tomoyo_execute_permission+0x470/0x470 [ 563.806018][ T8313] ? __bfs+0x520/0x520 [ 563.806032][ T8313] ? __bfs+0x520/0x520 [ 563.806065][ T8313] ? __fget_files+0x30d/0x500 [ 563.810843][ T8322] binder: 8314:8322 ioctl 40046207 0 returned -16 [ 563.816674][ T8313] ? __fget_files+0x32f/0x500 [ 563.816697][ T8313] ? do_dup2+0x520/0x520 [ 563.816711][ T8313] ? __sb_end_write+0x101/0x1d0 [ 563.816726][ T8313] ? vfs_write+0x161/0x5d0 [ 563.816753][ T8313] security_file_ioctl+0x6c/0xb0 [ 563.879282][ T8313] ksys_ioctl+0x50/0x180 [ 563.883544][ T8313] __x64_sys_ioctl+0x6f/0xb0 [ 563.888240][ T8313] ? lockdep_hardirqs_on+0x463/0x620 [ 563.893625][ T8313] do_syscall_64+0xf6/0x7d0 [ 563.898298][ T8313] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 563.904818][ T8313] RIP: 0033:0x7f4256ace469 [ 563.909471][ T8313] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 563.929645][ T8313] RSP: 002b:00007f42571bedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.938426][ T8313] RAX: ffffffffffffffda RBX: 000000000043c8a0 RCX: 00007f4256ace469 [ 563.947538][ T8313] RDX: 0000000020000380 RSI: 000000008008700b RDI: 0000000000000003 [ 563.955519][ T8313] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 563.963803][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 563.972178][ T8313] R13: 000000000000045e R14: 00000000004196ba R15: 00007f42571bf5c0 09:15:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x8, 0xc5}) 09:15:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000900)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/241, 0xf1, 0x3, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x3b}, @fd}, &(0x7f00000008c0)={0x0, 0x28, 0x48}}}], 0xb0, 0x0, &(0x7f0000000700)="0ea058966df51f814c97bc5ed4dc011de601dd8bab33636472479a00740dd3ec1aabb00b2c6aec8c15034bf26608384dd00513acd53ef0fb516a5f617d6d447506a2ceb638260152404da85fa9d946dacc2a9e90a10b2e3657776c2607f14b01843ba81dded0cb16b6997d4be4c68887c2324988dafe981d9c2a631363a694c639e0fd1972c8d6567da50428be2fadddd690601af9e2bfda37a3395666131b500900"/176}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x55, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1263484400000070d5f17500000000000000521b27f68592e3baa195763bb60000000000000000000000000000000000004800a543e69800001800e4ffffff0000", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000080)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x68, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b630000076304400100000011634840020000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/179], @ANYBLOB="b300000000000000010000000000000039000000000000008561646600000000020000000000000000000000000000002700000000000000"], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="00040000000000000f630c4000"/24], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0xe, 0x11, 0x9, 0x1c, 0x4, 0x6, 0x5, 0x117}}) [ 564.016289][ T8302] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 564.031579][ T8302] IPVS: persistence engine module ip_vs_pe_ [ 564.031579][ T8302] ip not found 09:15:00 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x7}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 564.090909][ T8318] binder_alloc: 8315: binder_alloc_buf, no vma [ 564.101983][ T8318] binder: 8315:8318 ioctl 4004560e 20000140 returned -22 [ 564.136236][ T8330] binder: BINDER_SET_CONTEXT_MGR already set [ 564.160307][ T8330] binder: 8329:8330 ioctl 40046207 0 returned -16 [ 564.190120][ T8330] binder: BINDER_SET_CONTEXT_MGR already set [ 564.219863][ T8330] binder: 8329:8330 ioctl 40046207 0 returned -16 09:15:00 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x7002, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) [ 564.244153][ T8338] binder: 8329:8338 ioctl c0a85322 20000080 returned -22 [ 564.282897][ T8330] binder: 8329:8330 unknown command -1 09:15:00 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x3, 0x0, 0x4000) 09:15:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb, 0xc5}) [ 564.289482][ T8330] binder: 8329:8330 ioctl c0306201 20000200 returned -22 [ 564.325826][ T8338] binder: BINDER_SET_CONTEXT_MGR already set [ 564.332022][ T8338] binder: 8329:8338 ioctl 40046207 0 returned -16 [ 564.340603][ T8341] binder: BINDER_SET_CONTEXT_MGR already set [ 564.357980][ T8341] binder: 8329:8341 ioctl 40046207 0 returned -16 [ 564.369984][ T8338] binder: 8329:8338 unknown command 1145594642 [ 564.381000][ T8338] binder: 8329:8338 ioctl c0306201 20000540 returned -22 [ 564.402259][ T8330] binder: 8329:8330 ioctl c0a85322 20000080 returned -22 [ 564.451982][ T8347] binder_alloc: 8340: binder_alloc_buf, no vma [ 564.511688][ T8327] binder: 8315:8327 ioctl 4004560e 20000140 returned -22 [ 564.535465][ T8347] binder: 8340:8347 ioctl 7002 20000000 returned -22 09:15:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x17, 0xc5}) [ 564.571005][ T8313] ERROR: Out of memory at tomoyo_realpath_from_path. 09:15:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:15:00 executing program 2: io_uring_setup(0x65, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x82000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x90, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0xfffffffa, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x2a}, @ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/243, 0xf3, 0x0, 0x16}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/211, 0xd3, 0x0, 0x3}, @fd}, &(0x7f00000006c0)={0x0, 0x18, 0x40}}}], 0x0, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x3, 0x0, 0x4000) 09:15:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xe}) 09:15:00 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x7, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x9}, 0x1008, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r1, 0xd, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0235acc3e47510b29e3229fe7eab6708000e19722e2b2fbd61789f5ac0d25cf7c4dab13b34be3afacc78fee4ac40a45ca7b6ef3ee4799d02838fab563afa00000000000000000000000000000a0ec877582f9418df120b8906fd0f50775bce1145c2f19bbfd43f51d8bb8ac09068f28d7db7274a3bb0d326d8b946789cebbae6ddc89ce82b9f6d4737ab490c0bbe7d674088187b83c5b400ecec5f1ca38653759040c84c098f1b0dcdb99e6189716d15fcf53c9da37c29b93e4c84617a944f7b9353d3a0fbae182bf1d70aa9e674"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r4, 0x0, 0x2, &(0x7f0000000000)='$\x00'}, 0x30) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) kcmp(r1, r5, 0x4, r6, r0) 09:15:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3b, 0xc5}) [ 564.757820][ T8358] binder: BINDER_SET_CONTEXT_MGR already set [ 564.760293][ T8357] binder: BINDER_SET_CONTEXT_MGR already set [ 564.771222][ T8359] binder: 8354:8359 unknown command -1012124414 [ 564.773089][ T8357] binder: 8353:8357 ioctl 40046207 0 returned -16 09:15:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x300, 0xc5}) [ 564.804222][ T8358] binder: 8355:8358 ioctl 40046207 0 returned -16 [ 564.805363][ T8359] binder: 8354:8359 ioctl c0306201 200000c0 returned -22 [ 564.828858][ T8357] binder: BINDER_SET_CONTEXT_MGR already set [ 564.834047][ T8367] binder_alloc: 8354: binder_alloc_buf, no vma [ 564.835788][ T8357] binder: 8353:8357 ioctl 40046207 0 returned -16 09:15:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2ef452cda6dc90e8, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 564.870341][ T8367] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x2, &(0x7f0000000380)) [ 564.920002][ T8366] binder: BINDER_SET_CONTEXT_MGR already set [ 564.924151][ T8367] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 564.933339][ T8366] binder: 8353:8366 ioctl 40046207 0 returned -16 [ 564.951310][ T8357] binder: BINDER_SET_CONTEXT_MGR already set [ 564.957889][ T8357] binder: 8353:8357 ioctl 40046207 0 returned -16 09:15:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xe600, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3b, 0x24, 0x0, 0x17, 0x8, 0x7, 0x4, 0x86, 0x1}}) 09:15:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x500, 0xc5}) 09:15:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x10, &(0x7f0000000380)) 09:15:01 executing program 3: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70000000130a010100000000000000000c0000040900020073797a30000000000800034000000009080003400000000508000340000000030c00064000000000000000030c00064000000000000000040c00064000000000000000050c0006400000000000000005080003400000000627d2c9a36ab1e45892c564af32f18aeebbacf56d19ec7eb1522544a54f63ef8a54b3b0c6126ee8a9da89099c8a24e572b70d242bff1866d0a6c1d008fac2f107a7d5b173d4c4"], 0x70}, 0x1, 0x0, 0x0, 0x24008800}, 0x40) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x460000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x2, 0x0, [0x80000000, 0x401, 0x6, 0x8001, 0x6, 0x80, 0x6]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, 0xa, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8f}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x20}}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 09:15:01 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r2, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000024f9ffffffffffffff00000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000800010068746200240002000800050000000000180002000300"/56], 0x50}}, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$inet(r8, &(0x7f0000002900)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="134b81b6173634b2a9f45cb3854c4c79f2cb2593e5bff5d3a234edf0c797d111a593777cf4a3d643db2a5c2ec5444aaf98102f207f5b1b7fc90a01", 0x3b}, {&(0x7f0000000240)="206a9b44a4c21bdbddc9f599df93e723b17c6c3997c42fc9c3449414238b341d8497285f09db8e9a15621c08db1c45f4cb6d5882297402de321d87d18d1e26395dbc77ad2ca8551dfdcbac430f94dee9390b386e55a84daec2a99acdcb011ed1f4cb9221f9028a5cd75a956346e0d520839483c61f2e6d568cfe2849fa791aa34940e7bd1d3196e2c400574af210ddcae92622e4539eb9373b4cbf122c4cb9a00161442499efbb6f582be56fd5584f449716ca037806076674d4cc02a2d3df82ff137c40f374e88b7fffa38eeccc23665df5deebfe85cab374daae0a5f13f2d21b3da52a5ac52b", 0xe7}, {&(0x7f0000000480)="db3998a4953faff03d6dd4c96df1024f2b3234e8faa357c9838d194b64cb69bcfb64e74218dd", 0x26}], 0x3}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000500)="735c9684a42f9676a0a40a006b67beaa88b7d03fbe01445561b21ed5810580e043d4b59ff338ef64f726e045159586dd09d2cdb503bea103f2b93164f43aba932d6dbdb5073d549511846427e6f3fb9aa019e777581d8d8a1bfa0fc050da849e7b82703a6f712a94099efec88923a65dca8dafd115053340cbe434f21972eecd0a0e1eac8dce198bfa3d6d1fccace366d8b5724689373cb4e16eeaf07a55e5c5c95520f14f2a52aefca6c0fb3ad0fbc4446fc1b60f63268de554d2acf2b5c6ca97aadd282757b276cf65371300cca699", 0xd0}, {&(0x7f0000000600)="c134988cdcc060920fd8d680f81690b94d0b7f9f873992c2a0b08b4956064f6dfe2d5bfe91a6b371d3e534186be3633ca7fb4914237f19936f4bc4f2510525068ae158b4e3c31997d526ff4c7e9f5b5a042caec8dc267258b14dfefa23b786b0e0fb21fd33afa7bff0743614e1f8889cd8b6344b89245d547509b6569670f76356959a2478478ef09ebfab22c55de4adfc", 0x91}, {&(0x7f00000006c0)="ab0fb2236fc92b681fb3de9f78158cb71e5f76f680f2fd258590e714815f332c6d9e8877e11fc2c80ccad6bb61bc21ad03c40575dc7574f99228824f3f128a550da8ac010be97ddf429d24ea833830007332", 0x52}, {&(0x7f0000000800)="1b683e515042980ab1887ecad6263c8fca244ba98e9702281b38357c60f5881b679f86ddd59b87a3ee80512cdd22a4b7a9c891f0514275292363cee41e505cc519b792b0cadb1c70a0013b8190ba30b1c7591da4eae207ca93c76d7b8175f77e6dd08ea6c5e0d410eaf44b87ff00bec130ec2b4689c537939dd144088b16b0c585176bec2607b2e215e31ba18b782a4c09bf9be04bb48300bff94d2909472762512487c9f3077b07862c11c51d518e5b057e55ab7c2e246bfde038b35d2d88a475490cabf3697d92b104f0af453fbb0c1679db2f575d9c173f00371f26cfed501bd955f67a878bc29f11b7be87292d5ccf710f9aab0ff9a85ca0157008b86c51e56e1b5bc40d5e5af462c409113059b3aac1c608df0014ad10e5c94aae0a185602b9f156b8ac438ff735c32fb9ce1554c84b055f9247e210db2a35329bc8121f0d8e8e5b457133c4537612ca8bdf4b9696147bd7208b922bd4c78e21d5626722678d24b44fc70b2f21463e3ce0b988f74b146add6e56a209a876d00be792109798b0e441d6421342123c587d9b4db76150cf6d723c9405e03e1374c254fc4c1081222b7e43875c7f4ad31dcc429cb7732644758deff9925c603b0fd4deb427b55a51fcf506d7325119c6bc5f26b5ded5a2706dc432a44978b3ae38a056052f30422b5ad3b7f435534c8b8a5b7d7a45f607716fc6edddde205dc489fe4c77c7ec08f2366c7f590b958bae4b25232b28367d4e8dcf39638674e7ac81237f08b04cb1cf4656eff38273e13d5268d20aec3818cac5bb2d730e00b1a43888342fab8ac9c1dd2de1e286f49b3038dedf9cd4fc9cecd12b8030f46bf553e9445bb56666ffd466cc1ab89644b45291654712f23146b237b24c51f0266756c29f3168d5ef96d1f13f79f5fa908afaa3ae2d8c49b9602aa136834c6b37a6e12077cdf713d019e37f374e5804a6e17a94057c85ad13699fc615604b52f047b74e9f41391b2544b5ea3b6dc3097c51abc20fd49d7557a1859786bb3d6acf225ecf4875d77b64ec0e5c94cbe4875f5ccf50c318815239efdd0ba6883bf5f44d99b493a3a4dd961a8e3a63cd68e5644c6e89a650dbd3cc6a5d9db39ba4c50975c462a952abd09e8089f98139b7f63779d75bc6633b14c6c58cff9db38c0bc274185c7837c05b07116ec03f42b836ad116862bfb1618b7bfbd85c893ddb8ae394b0a140964cedba6ab8489539df8be9ceb95cfb74b5691128c5dc45cd2e66a7297e9c3f6f6068f4ea3809ef5f90e1e75c2a857b6e46bc9d3a9c3084875c06d5bbbf2d3e7740ab5648ee85e6a7b711bfaeb8abac57198ea9e495bba0c3e083d96d709b6a68e4a714a08d5416dd6c7a733685f32f58ca316639ae93589210ccb2f222b7aaa1e5350d0886c76ec8ce807d0c7bdb6b952d39cc345a819828d0c4c572d192a5bf6491d45b1b5c4f2ee4ba3fc86a66f6305a1703da901b2a5c60c5459f5c42675b77902d1e6752a48acdf6dfd03223895e3181730eee4d2b25832faae6b177b1cc936b56f22060b692e8df574dfe73daf37db662798134ae1d21d994729a67af37784e946e3245dce249701692e0d6c46cbf826b08f88881f9c05372954fdcdc0325011ae16e1bcb3850a247e47ce66f4a5b9880bfb0f336636d90928b94b2baab1ad1855f17ca11660d51a206f39d0ddb4b3d4843191a06179c23061298fc0761bd808d7d4a61d5585924372cfed5e27c5a15eec7d740a068cd92e1caf82525972eb9c8382aee0c4e8da156ad96d0e436ea9e9537a9bc4aba3406265e2df2a962a9fd52afb391cff02d77a63f07d70f2a6d78fa732230bd9a80d401f7170aa82f4c7f5bb8c5cb89ed66dc16f1626b1605d0cf31b3b6ed0ee1f59d193da07a9960da966e816b821910ace28c79377490321fcc5b34fdc6e8f287dc2df00192167ed014d0f1b4e4021702852602fb41b78a0a45b9f10be5e080a753e6daf58928703c5d02f40279c238eff7cd4af015401817ebc6a7e00cce584412165f41f51e2fa663aaef80f036ef9a1ba1fbed54641c3795cd5dbca107edf1f1e653a7343459c905a7018baf53e5a285f1bf6f9370bdcbcea8525a902f03bf004eb5c93e4543e44f0026d0c7a03149b4ef0c4f74946b54cbf46469ae756955635d15dad54725e241e783bd906302cbf3b4de0ad949c3f052e2e76a5355b07406e416db713ff3d2821988c8380e2914f40a87eb46627260b2b80a4b1d5e9ab918cf38a80c0dfc3aded7b77a24b6dc6172aa94190b10c69aa6cac80303aae9d572555e0cdc33f5c3f32876904cf5cdadc7a59857f8c37096d4ef610cde4162dc47258344639c2f1a38642144af6fae76862419fe7ee85af1af6cf0422e9f46689ade7ec2a2e2d3836edee707979eb7379b6015d31be89be609dc2b242e0d57c82e8d3c629c8bdd6bcb04ffa39883515e0783c6296ca0f3db340e9f890da81339141b409c4c9695bfe6b0176d26c97fa606e5ca9c3889a1db650eb01a072a0ec1db3f83be0a1fae3dda2b0c2e7b1583baf76950b3e7b093622a85019dc3a70025d1064cdb123b07447dd02d4940acaed4ab33e3ecbdee9908c049f0c869a1dbbcf6be03ad10de912c28ebe2f8586ceb3b10c565098d43f89acf168174c5deebe388d1d787c26eb9c4ec557e5ad2f4d8617bb15c351b07a06ebe674aa74de675a1afbebca2ff270ff0f28cb42d96cba73ff33988ef5b686dfe4cec1a0e5291644b8fc3c49397dfc2f06031d7735b3e4b29f51315f252d4019fdea3dbadf0892694658c61a8ea9ab9afb7fa901026450fddef30897d1927962224bd0fe483182ba445e1794f51dcdd51de2910194c46980b065e0c56dc64ae81858d90233c7e0d91bc6626bfba682f0585548ea150f6c42962d62dd8232656440a38e7ad36680674a04a1185e74179980a2b11b0f1a94a86169076e04ccf06d6edcf2bbd78446baf2261fc223100d3e809e71ab8699aea90ab020e77417c335d208d54916ec1c14e9826a03b51b225398252d411d7c8a9df9766dcb1d1865e0ca7d3c0d2af8268df46928cce740ed92387462f83b576fb69ac36a902047188c2a8fcd8d18b3085bf0e2ce195fc57a34bd604673ec52ff3d7f624dcd0a45e7968ba2834db1e4514bd7e5320f2264898f5c7553427a2bd36ed39fde35a6b5b308d9e18076f51892257027274ed194942ce874502bf54318fb2c85ee0f737abce8dbecf6c3fb892af32ea8420ae38afe71d5f6c9427c2f3b6a8f1d23a42a8554e39e1b178bdaea8bff3b79f39ca640091224809db803187c60df866737d25db1caea7aab51e5905e25fa1572dc277e28eec86043d5187f7ea7294edfd35acd3dc38f7ba0121e3775bc6cf2ec01897f0b90d882cbbcfa6f17bb8b8e9d988ebe41550be83f098b9d8ed7be5e441eeecd9cbdcddd41d017f5e571412297e4abd0e179a6c780f99249033f127afe4b9e1969eb1ad8bf5303e766c958574356ed8f4f2726257782c1db0137ba9cdab9f3e5d2265be398207d0f6a7906fdb883bfac7b6565c12fc820e185fe5acf59fe2827a4b231a52459d3af9c815908b61d05686478ebaa1545550b97d1f768df277d7fa9b2ebf9542c87e03bba446ff7773833a4fc6c03b1a84b0e8871b35537a24dc6205053372c19f02bd85ae23411c53f1fa23b6df58ee5e985c2c0bef71b6c45a032cfbd7b8c30164f211e9bdadad09262563147a17277acf9488a7d8bbadb89ddcd8618c855b5218a7a0be9dfd07e33fee35c34670d9f137ad661c03c96ec1c9657d1f7bd033e241035e040b5bc48ebef3afb8ac08929545ea0d7a760f4cb04b90f72081873078330e20def33527263614f3be3f021d64f2ffc505bc26b08621fe2d74c5366850f5c78faae2857f7d269d6ac9397e0b318a38d6ed22fcaafd4ad3ea3d9d8c95b1f909820c1c56f8a4540b3cf320f324d0cebfb9d74171205e27f9d21d9221e01a8544907343535e96d650625657f371600e92c13af766f29dbc1b2f171cf562bd42e7d6c11818ade57f0df0a41e3ae1132825158821982e369c34c9aafce1174290280ff56acf69ee702990eaca43f77b941424fb6dde5ce6b90e43c3810e3ee96d863d7a7912fe560dec15ba12054209fad79b585dd6c76be4d0107dcd21f00b79feba5f837647949ce61324c931ee8de72463ff5b391e3b704de036bce959198c2f5da2687444f88427c9eedb83a913f08ed5f00cb44ebe17ef227cebfad1c3566eb87eef95ae9b6b364eecf8b6cf2228e242758f24736c56f179479e567f8a8fe24de917a147670c616e57b5ad25ba422cfba9bb0010da3af2bcea7f162462473b553e4c77e0f9521a6c34750b4efeca98bf3940eff39df4f8b6208fd9fb4157b522311580a2ec6573728c29187771d5a1cc82b7b8fb2f60ca300af763d81c0cf13ba513836884bce3c2834c503768fb0d4785825c4740e80c584f800d0b757f4fb86bfae552df2008d504ff9c93efd2f5a172cef437dab813f2482dd4a445c78086be997a29b9650787efd5bb808968a509aad03a3ba297c8e2ebdd8c32537ff80d21ad09424461d4625a4de46329ad15d7355e152ce2d45c89567436d5c1bb914d72ed13988dac4cb368ecc5ec0971bc8abb485d577801e855cabc2c98112686e74ed153b2325f06a9264f30ecc5759d5cc3f8635292f80382f0dfe62659c8630aeedfe32746ee2db1fbec9c7a16620d401264fcfe01f7808e316bde5b43c55a42a1bfc06c193a5ec2f09f9b0b857a2da2452dc07eecc04fb10f19bec9707a57ade9d8af5c503b9dbe50fe1b34a7dcc5c97c1733e1907e8f0155a52c6abcac8c808ad8e1f21d914a63af43f26e19074189b0d2ed820ffa501ff1f96159d6d6a8b6ba8b7cdab6e8a8b710830ee7cd6adc08a757c8b0c5ed2eb183d1edfe10b1779b747a3a28abcc27b3ac2ed408c767a4f37bff09effb53a498e3698cced1afea9050485c6b3aceea169c5bb73fd09856e9aa48b57f7c5ebcc9808addd066072b1b0e318ff2f35f140d1ffbabb97f3589864387ef8f2280403d660fa94a78f4d23fc4383c5cd6bac1f25d7388f916e89e5317a32da13e3511a99cf6be60d0851a8b30a713986937456d87e83a00832608cfd2c6332cc30bb4a560471f259a67c716b9e775278a4e2ea767bc3f780c9c760169eae8899743f7873d66227e7ce2320416f4f82c34aaeac37760f42a35546cc6c17acb7ee616486bf2883e33c5cf2a729f3074d9e7826cdd480a70d32f78a32b6e7386ac3a8118b3ae745b2bf3bfa6821b2bbf4d6ca9b0b2fed40856fa1ef9fc1ed0c17b10b8247734ba3a4988162010ee6052e9100429a89780fd7ca0c7515d5e458037244ec132447000fc07501e158324726fe484e5ac9f3c0b67380c11d6ec486d3289bc4100eaac2eff397843aa334cca34f1f6e29b8b4b73d2f88ecb089eda641e3133441766944849b4a73510412b3bbb4e8ae97a9661e3c7d18d0fd6d38dfe8c99528d0f2ab3804c27090e57a12678658bc9b4daf49133e49b37c48b0f1d3908208dd11e864de298416fa764e14d112f78c5f4f374dae139e18923446912f2f924b4391c2f55bb38f090970e8581e6e5b945d8390b8d93c4adf3716f9f5faf619937347cf707d4e14e87258c041dcfd7e7d83f69b1caa90307b989229a4f0d4fcbfbab06582a3fc503869e84d5ffc3df0c5b1bd3ba26285451c9a0d0e2dbe361e461231ba1f9d9d453497e0ce8da1f361fcd05d1b65357cd67e359c66c4bd4375c1236697e8d3b", 0x1000}, {&(0x7f0000001800)="a78550267019feb16fee2ebfb5f566dd6cbeaa3d3cc588958ec60517194582e31e1c51fa469fed1b4ae0731dd319e20b91e058f7aab7190b546a05733149cffda91e08637ff2ebae60ac0bd56c0081b08f51df90b59ae5cc061bea9ddbacd96d7789c34b7910c2e27f2e910e47f980e0c3be070fee50658a6e90ea323ab2befc1553ec7cab5b316922c0046a553f5ef96069d4b9ada9f06dea39802ab32e2c750a2a56148739afc7de9b393780e07e", 0xaf}, {&(0x7f00000018c0)="77eda7671ade607dd0d44925e539bd9f17927c41fab6bf22664c5575196f4d5ffea17daaf655c70e5cf959ed037b3b3f0157b5cae4513f6c2512cc094cf674ec7f6f865ab73880b446117e4b8d0e6674f22b9941e10dc5343d87e3353a12acc55612a281d12328a3a869083d0c86ed5b1efd264ccab13e25460293b90cd4407c62d1316aedae4e8e50731adb690120", 0x8f}], 0x6}}, {{&(0x7f0000000740)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001a00)="d39566759609ae2cae4a5939d4a678c45bc39ea9c4a691c86791665e70d33aa5761563286aab4306f9e6c3da58fca0b6f004ea43ca3dda4e0505f2cdfa0c3fcdd2e9e1eb0844adbe794c7385b67c496d50018f4d1e3973a547decab40f4f66f1001948901ca7c680e664e91bcfc24f25286adc881c202c0ed2d457b10d2aaf097e26b1098ba1f633d3ef7822844605b17ed3e0e48636efcf8ed29cf0be07e195ebdb9fb0b84e0218cd3674f9f41a907283790a4f466d33f7a1327eef148504163100c4ff7b643d8d131d5f7c4ce7bcd99681c419f2afddedf6e3cad0bd5a06ac", 0xe0}, {&(0x7f0000001b00)="015e0baeedcce01e20d6e6038be0285681085137f28004e1a74182bec2c88c60da02c2a172683682e22df419fc6624bcd78e95bb1e1bdd", 0x37}], 0x2, &(0x7f0000001b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102]}, @generic={0x86, 0x7, "f3d759ce61"}, @generic={0x83, 0xf, "76a4d9080ffd4f1fea7debbf42"}, @rr={0x7, 0x2b, 0xfa, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0xd}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x32}}], 0xe8}}, {{&(0x7f0000001cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001d00)="be65176806c6c1bc375e5960b8e3c2c346124b3bc27140a102272739fe7b45d56f3d39b0c6f7d524994214b406151c37e11e725d3b28469b14612337e20123601c548e6ca9dd7e5250e36b8b20a258c4bef786fdfd889c5cd856ec79cd6d0b2790ec7a9b8e33f3ddeccf6de4e6832d7252ca2cb5069317ce734409b3d0b0a0928a019ea399f9af3f55aba1127b8465675c104baa509067aaa0abc8011becb8d3c30c9f85db", 0xa5}, {&(0x7f0000001dc0)="d20cceb0e9fc459c", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001e40)="de8383d2e2701f68cc2314f2c4043de867511ee238a9eeec289ceefbf717d5dc1979a979b2b7937797449b2b9f76c01d8b08df3ace5b2924ceeae705ba9561f182afdf4a0fb72beb25b62be5f7e5c125fcb9345e5971e38405220a4dd3419c4786d5290d364daec78c93046d52e7194177a36133d527ca5c64f646243c3ba7202ba6a193", 0x84}, {&(0x7f0000001f00)="1afddf22a1312003b4a6751724c5a94a38a6424948a76910023a29de7826aa3b8062d3ee330ae3808e9d3747a329995cdab4a633df31f450fa0487b3273472cdf13109460534e79ddc13636f2752e289bb19b6a1caa88c85d3fca1339f9520e6098847e24878830fbff8ef87b0cd7adc1e347924f45c63564269ca73ec58f79874b8cd378e5a", 0x86}, {&(0x7f0000001fc0)="feaa5b057e7d10dc6f5f87df198a62a88bc4b6dbed519dc545f6fdd13a5d322868a807201e8bc0a274e76386a98a36020db1f14850af0f30", 0x38}, {&(0x7f0000002000)="59e3d4975c5834664096a32b9df2eecb26a5b99a09b83dfbaa7956215dedba1471a3dd7a316bc9981211db4802a4b052e64294d37168636fa48fc381bb4f4f206901b4b307b80983611c044e4d305cd2f1325657be6da091fbf42b4ff0f60c5ab24e6d2bcc3998833e300a6cffc6751f29f57b232191c55e81a1a4de314af1e0e4a628c97593469b682e4a8e05d2507ba4415c2d38f07586a60a5306e9d76e440e74850ad723e00cbfc03879abc87fcee04501206c984fdc017d3b8603ae21f4c0838f57", 0xc4}, {&(0x7f0000002100)="3757d3dc240bc783faed95ed534bac42b30fd52f1da26771fd2b791239a1fd3766c95772b704225641a822cbc4dcc81370083c0a43936680", 0x38}, {&(0x7f0000002140)="278e3ed51a7fa1314cf4ab53d07aedf2eb5975dfdb0748b0b60bf8c006e0902ae3a1025bd7203353674249f9dcb50b8879b993aa14424bcaa553df4640dcf15d03b15e79489e3e00b9e84fa63654daff63a635b79753921848ef74035b42cad6f37c", 0x62}, {&(0x7f00000021c0)="feea6dd8b0551201592ef3ebb5b1a263a6b98cdfd1f893cbe271110fbd9bc5f3f834a86b00432791151d204d48f51b34d9e70fb5648be4f4f1acc44411d3ae08994b4f558cac2b21b7ec778487440102593269fcb8dc7fb6b2d8c3c590bea3e0f2059ad9163aaae20025b4d38a5bbbe2606bc9a0cd55150e882ed432c966ae1b6a05f25eea3758093ca6b7fee6354231d7fbe93e7c3f4b049eb92c328abdcc50c3", 0xa1}], 0x7}}, {{&(0x7f0000002300)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002340)="5fd4296e2357203be085c5c0927b5748e6fa1a8c8b2dc611b30d84f02d883ff7adf068baa1223bb13560d68a47c8c7a9c6857b9306be106b91eeed0fe97b136a9038af96bffe6a1dd7ea3643e5e162cf82e78371fd3592734c78418f359e0f2772fd0b6d1d207a3a75b895d5e276a9e5b22505e48025fe349888f72927509347fb17d2d45501fe9f96f6eb", 0x8b}, {&(0x7f0000002c40)="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", 0x154}, {&(0x7f00000024c0)="642ddb0a7f3bf450de819fd0bb2d976936abba716b1a1ead484d9328ac0ad2dbd8900dc23be2bb3d4b8d588223080c9fda716688a0413ba5e8435facca2573590cb2a69fdf83d82e7ac432fb76c501c735bd85405de9b428b685d60f29b743fa6e9c739841df79ce86e722fa7b78090d985232ae3edbd206f12b81bc177f707a20722b716627f45884", 0x89}, {&(0x7f0000002580)="f10f54f324833ecd6a0fce8f4a350ff1b71182ac157c3609ffaabc33f141a8e7f4977465527b3f5a4304e38a94973e770e9cd51ac2757f10cae6a573e35d898f35b406d80d6f825994ec3f69fb71f2a8aa4b0a4203ffadeb1b8f44c6b9992700ccfc00a87a91ac6a7a8112eb96b8a14d268be368ea04d93d159f1bbb0229fb2a5ef38971ba3b28c548fc7b40557d3bcb0246ea63b9fae93e8a93922b38be30e0e01503db24df68a68dfd8f34c8aa6281f147602cdbbbf72b4832bd93eed55b7a3956533a6bc0c0", 0xc7}, {&(0x7f0000002680)="0c182528b59bb517e73d796a1e", 0xd}, {&(0x7f00000026c0)="b17cd27d0a52a32f765365ff8b61a82b5a8c381720d2913a77742b6f3c68f123bc35d67312052e15b403ee6cea6c009bc5037ff70fbf350e30cf2e9a3bd4a24c857774fd5a15d5383780e1ad052d3327fa4f7bec597abb4a987304e9712bb846afcc417aba4193111b495ac604f7b010695ef9b763e2318675e45d4ef9bf2f906b9107dc1a468f916d8e446493576426f070517f40767e151aa2ffc42062c22021b87c49", 0xa4}, {&(0x7f0000002780)="9246bf9cac7a33355d61c2581ada27ec35fea0c0aad35c2832413a5a3a61f618a069f60c0a3b6348a66a2b2d83b7a285ccad341bc5b81d636385bfa8409e25feab16fb002571ab0fab2caae8612f", 0x4e}, {&(0x7f0000002400)="dfb76746ca4067855dea99c5f870c84c811ee934dc8976e852faca65a5b75d750b4fe473c2c6436368a61a919a44dbf8ddaa2dc9a479361fdd2aa16ec1b59432d59e722ed75a6b929dc6c20ccaf0d9ca40c8b2f2858437d6668cb4db99be57753cfc4a0c83cd1932a51d5446460dac", 0x6f}], 0x8}}], 0x6, 0x44000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000002a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf2501000000080001000100000008000300", @ANYRES32=r6, @ANYPTR64], 0x5}, 0x1, 0x0, 0x0, 0x8044}, 0x4040044) [ 565.206970][ T8347] binder: 8340:8347 ioctl 7002 20000000 returned -22 09:15:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x20000, 0x0) getpeername$tipc(r2, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="f214a7b661c5902af30802edc560a65a501f4a9552608588b70f52ba682077fb2cfa7dd52d8e250ae31d35405e05b7bbe8f3f99f8e222116caa532e9ba95f559ffeaf4cef1f9b4a904b9bc2761e1da99aa5ab4e404ca2815e1e2ed40a38a81b4d940e8896938cf43bdafa77f313d86863294ab17a47ee06fa8376139bf0f90e3bee44157c8597e3145429048fc7e7367be8ae3610e87eaa9cc3d0f5e10d370562f61d2af9aef7a1e82c42c6970946f9238c63268f5522c219f2fe93c4b0fd3a14ad6418b59575968a4d7d7a2e778c7c9", @ANYBLOB="edf26a1d05cefe02", @ANYRES64=r1]], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000340)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r6}}}, 0x78) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x21aa7cbfd11da865}, [{0x2, 0x7}, {0x2, 0x6, 0xee00}, {0x2, 0x6}, {0x2, 0x6}], {}, [{0x8, 0x0, r6}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2, r7}], {0x10, 0x4}, {0x20, 0x3}}, 0x5c, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000180000c9d00000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000480)) [ 565.314160][ T8390] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 565.352774][ T8390] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x600, 0xc5}) 09:15:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) read$eventfd(r3, &(0x7f0000000000), 0x8) 09:15:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x2402, &(0x7f0000000380)) [ 565.471565][ T8401] binder: 8398:8401 unknown command 536872704 [ 565.490683][ T8401] binder: 8398:8401 ioctl c0306201 20000200 returned -22 [ 565.525000][ T8408] binder: 8398:8408 ioctl 80044325 20000340 returned -22 [ 565.557901][ T8410] binder: BINDER_SET_CONTEXT_MGR already set 09:15:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4c00, &(0x7f0000000380)) 09:15:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x700, 0xc5}) [ 565.590655][ T8410] binder: 8405:8410 ioctl 40046207 0 returned -16 [ 565.611523][ T8392] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:01 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x1024) [ 565.638447][ T8392] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 565.646449][ T8401] binder: 8398:8401 unknown command 536872704 [ 565.659762][ T8413] binder: 8398:8413 ioctl 80044325 20000340 returned -22 [ 565.680555][ T8401] binder: 8398:8401 ioctl c0306201 20000200 returned -22 09:15:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4c01, &(0x7f0000000380)) [ 565.715686][ T8410] binder: BINDER_SET_CONTEXT_MGR already set [ 565.725767][ T8410] binder: 8405:8410 ioctl 40046207 0 returned -16 [ 565.738208][ T8418] binder: BINDER_SET_CONTEXT_MGR already set [ 565.757317][ T8418] binder: 8405:8418 ioctl 40046207 0 returned -16 [ 565.803972][ T8402] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb00, 0xc5}) [ 565.844647][ T8402] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:02 executing program 5: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)) 09:15:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x541b, &(0x7f0000000380)) [ 565.895112][ T8425] binder_alloc: 8420: binder_alloc_buf, no vma [ 566.104635][ T8400] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 566.134714][ T8400] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 566.343150][ T8392] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 566.361929][ T8392] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x5}) r3 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x3, 0x0, 0x4000) 09:15:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x1700, 0xc5}) 09:15:02 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x3, 0x1f, 0x0, 0x1c}) 09:15:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5421, &(0x7f0000000380)) [ 566.603136][ T8425] binder_alloc: 8420: binder_alloc_buf, no vma 09:15:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000154b8f535025"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000003000000000040000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7001, 0x0) [ 566.707964][ T8446] binder: BINDER_SET_CONTEXT_MGR already set [ 566.744414][ T8446] binder: 8443:8446 ioctl 40046207 0 returned -16 09:15:03 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3b00, 0xc5}) 09:15:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5450, &(0x7f0000000380)) [ 566.786494][ T8446] binder: BINDER_SET_CONTEXT_MGR already set [ 566.806685][ T8446] binder: 8443:8446 ioctl 40046207 0 returned -16 09:15:03 executing program 2: r0 = io_uring_setup(0x65, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 566.920469][ T8464] binder: 8451:8464 unknown command 1347653451 [ 566.950111][ T8464] binder: 8451:8464 ioctl c0306201 20000280 returned -22 [ 566.976297][ T8466] binder: 8451:8466 ioctl 400454de 20000000 returned -22 09:15:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3f00, 0xc5}) 09:15:03 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="177f281989000000000608"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48080}, 0x1) 09:15:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5451, &(0x7f0000000380)) 09:15:03 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TIOCSCTTY(r3, 0x540e, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 567.188687][ T8481] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 567.227583][ T8481] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5452, &(0x7f0000000380)) 09:15:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xff00, 0xc5}) [ 567.317697][ T8484] binder: BINDER_SET_CONTEXT_MGR already set [ 567.327964][ T8484] binder: 8482:8484 ioctl 40046207 0 returned -16 09:15:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5460, &(0x7f0000000380)) [ 567.410182][ T8493] binder: BINDER_SET_CONTEXT_MGR already set [ 567.436212][ T8481] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 567.461387][ T8493] binder: 8482:8493 ioctl 40046207 0 returned -16 [ 567.464268][ T8494] binder: 8482:8494 ioctl 540e 10 returned -22 [ 567.479142][ T8481] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 567.624106][ T8466] binder: 8451:8466 ioctl 400454de 20000000 returned -22 [ 567.634630][ T8464] binder: 8451:8464 unknown command 1986356271 [ 567.645825][ T8464] binder: 8451:8464 ioctl c0306201 20000280 returned -22 09:15:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x42, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x1000000, 0xc5}) 09:15:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x6364, &(0x7f0000000380)) 09:15:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x20000000}) 09:15:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x2000000, 0xc5}) 09:15:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000380)) 09:15:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xc, &(0x7f0000000080)={r3}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0x1000}, 0x8) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 568.108691][ T8493] binder: BINDER_SET_CONTEXT_MGR already set [ 568.118632][ T8493] binder: 8482:8493 ioctl 40046207 0 returned -16 09:15:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)) [ 568.195986][ T8484] binder: BINDER_SET_CONTEXT_MGR already set [ 568.205774][ T8497] binder: 8482:8497 ioctl 540e 10 returned -22 [ 568.213762][ T8484] binder: 8482:8484 ioctl 40046207 0 returned -16 09:15:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7003, &(0x7f0000000380)) 09:15:04 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x3f, 0xfffffffe}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x79b901) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12) 09:15:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3000000, 0xc5}) 09:15:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4000000, 0xc5}) 09:15:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x902, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7004, &(0x7f0000000380)) 09:15:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xc, &(0x7f0000000080)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000480)={0x0, 0xba}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={r3, 0x7fff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0x7, @local}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r8, 0x26fc, 0x89b, 0x8000, 0x80000002, 0xc4}, 0xfffffffffffffcd7) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2000, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000009074bbb3021a4ddb30cf5a3322b590128916bf12020a5e89ebc67c472f3e384a6b31d750bb48e0a697e8e64c0481c4a919f881827e93907e5d68c8e63f", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030600040002000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400000000000000000000610952a9893ba2c2365decc8fa382365ad399a82f046741fa80d9abac43c985b3f5188bf62db4dcd879d3225f781d04d8ee86a7a99cf3b30c3887a3cbc38a6799aa173264d6416d9f112"], 0x70}, 0x1, 0x0, 0x0, 0x200408d5}, 0x80) connect$ax25(r9, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r10 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x3, 0x0, 0x4000) 09:15:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x5000000, 0xc5}) 09:15:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f00000000c0)={0x1, 0x9, 0x7fff, 0x7, 0x0, 0x9, 0x10000}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x4, 0x0, 0xfffffffc}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x126) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x2a, 0x24, 0x9, 0xe, 0x7, 0x401, 0x0, 0x11e}}) 09:15:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, &(0x7f0000000380)) 09:15:05 executing program 2: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x6000000, 0xc5}) 09:15:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7006, &(0x7f0000000380)) 09:15:05 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_setup(0x2, &(0x7f00000001c0)=0x0) io_cancel(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf01, 0xffffffffffffffff, &(0x7f0000000200)="2f0a95f7ce41fd6079a1b2e9518c7a0196b36cda2a700b5e2d4602043f705d595bec01b6d095e92d5c3c6a8f4fff6d6e65b1407c0421397e2887662ec83b6964e9cd1c6fa2a5a431e8fc21da707eb7b13005cb73e6e4f8c3b494650528e8e08a879124e9887bb14173c7749ee5e3f3b90a1666a5a6bec4c2b1d3ef93899e10cf4289c2cc13caf9fb8f00ce9f59e58766eb16119a2efe9b5b808589be88958c9427adf24c2d0cf0f902db86427c69ff9f4373178629fd4eb1879401aa663c3820f44223d2ba0a480cc28b5a7138b989255dd57cdafa9450fe17412ba6baec269faf2fdc936ae8e16215a77b08e546a2", 0xef, 0x6d, 0x0, 0x2}, &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x44001) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000380)={r6, 0x400, 0x20}, &(0x7f00000003c0)=0xc) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x100010, r5, 0x0) 09:15:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x7000000, 0xc5}) 09:15:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x51c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7a1f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000000)=0x8000) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r7, 0x40247007, &(0x7f0000000380)) [ 569.178557][ T8573] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 569.204517][ T8573] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8912, &(0x7f0000000380)) 09:15:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x8000000, 0xc5}) [ 569.239805][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 569.271915][ T8580] binder: 8572:8580 ioctl 40046207 0 returned -16 [ 569.365844][ T8587] binder: BINDER_SET_CONTEXT_MGR already set [ 569.395175][ T8587] binder: 8579:8587 ioctl 40046207 0 returned -16 [ 569.428343][ T8573] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 569.428624][ T8584] binder: BINDER_SET_CONTEXT_MGR already set [ 569.466114][ T8573] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8933, &(0x7f0000000380)) [ 569.490999][ T8584] binder: 8572:8584 ioctl 40046207 0 returned -16 [ 569.491017][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 569.513941][ T8585] binder: BINDER_SET_CONTEXT_MGR already set [ 569.519971][ T8585] binder: 8579:8585 ioctl 40046207 0 returned -16 [ 569.522328][ T8595] binder: BINDER_SET_CONTEXT_MGR already set 09:15:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb000000, 0xc5}) [ 569.551605][ T8580] binder: 8572:8580 ioctl 40046207 0 returned -16 [ 569.577983][ T8598] binder: 8579:8598 ioctl 400454d8 20000000 returned -22 [ 569.586864][ T8595] binder: 8579:8595 ioctl 40046207 0 returned -16 [ 569.587068][ T8585] binder: 8579:8585 unknown command 1077936176 [ 569.625723][ T8585] binder: 8579:8585 ioctl c0306201 20000280 returned -22 09:15:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8936, &(0x7f0000000380)) 09:15:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x17000000, 0xc5}) 09:15:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x2, 0x0}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000000c0)={0x52, 0x1, 0xa5a9, 0x1b2, 0xa6, "75197ce9321e7ed7834ae1c0916804af2be253", 0xf92, 0x2}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 09:15:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8983, &(0x7f0000000380)) [ 569.935686][ T8611] binder: BINDER_SET_CONTEXT_MGR already set [ 569.961821][ T8611] binder: 8609:8611 ioctl 40046207 0 returned -16 09:15:06 executing program 2: io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x1, 0x2, {0xa, 0x4e23, 0x0, @empty, 0x6}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="7daa57d2be5961fb609e7c", 0xb}], 0x1}}, {{&(0x7f0000000480)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)="55ad452549cbd6393cc054044bd3bfc70704b5bfbed35e3b76a0d8149e4e539c4ce3ae6e143f5a62a5e2aa4a20d7f5f8fc8070df502b188cc44a9a2aada0e5998f1fde1dcb36a944543c3fce22325a37a0bf3187f92131", 0x57}, {&(0x7f00000003c0)="d5b6b47b937a89c5386b911fc515f645203edd3c40b3f43d396525a513970ec4d67e4945579076efb3ae84de11fdfd6364046d12a529b4cc483c00ede6c387", 0x3f}, {&(0x7f0000000500)="ba2207f72a7e12c3770092b83a26f077939e3253f4bffbf61786912d7d1c70b7416ac086d18c882c973016c5a4ae3ab7dddf8f5e1240c76786cde76b", 0x3c}, {&(0x7f0000000600)="fb72ca9a3389f1faa33a9fe5a113d19e6f4c009fb295e80767317855905bda2f662350cc0909e85652b90aa22f02b82831730b84a9c1404c4d7acd53654bef79e460f77f0a4b48195b063da4804ed0c5fed249d47f45917cb122b6f8d3379964b8", 0x61}, {&(0x7f0000000700)="fb15cafddf2d3dcc6a4bb8725271d3c3a41261d0ee9b3bd064474b524da985f7c5cf81588613c6df", 0x28}], 0x5, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x33}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}}, {{&(0x7f0000000880)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)="6d5d7645bd7ddfbc782e50af2f00a3b90f39f2ce1e5d11de19bc134ed4bfcc1ef199cd349316ea5ddb4714944296663f44181de9853e3bf6bc2f137da4accb17f610cb0a725c3e3dbde2dfee04ed48bbf616a426de41f64df5506a5095e94f52269ca1dbd3af450cc7017d9c0459ef9b35a56c9134a4a5f65626695458b6a0692ba4b91f2217c7ac8859eb698126c28fdd1911ad774fd9ec77a50547b7468b499e78e69df95c7a89b62c9895c45788e142abcb8aa06be99e", 0xb8}, {&(0x7f00000009c0)="e2aea4222a1851578619ba71740d259c4f9d21694dffca8441165a720156963f56020e818510adf97c546c7ad1de281e1f66d4526a4098d4b97e7289742988b3621fd578c0b29e6192b8266d7880460b0aa96a9649592c8efd3fdfae32e7b8030664aa931d42d4725d603d2226d45fdd512b100080122ed3335a3929826ba01d92de87eef6b633cbcb6e634f", 0x8c}, {&(0x7f0000001780)="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", 0x1000}], 0x3, &(0x7f0000000ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffbac}}, @mark={{0x14, 0x1, 0x24, 0x5ad}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000b40)="8f7b223c7b91bb3692daf203cac123467633399f6c9cb5252937c6b14bc652a4fd4aa365", 0x24}, {&(0x7f0000000b80)="074af7a2a4e4ee03f6f5bd673f98c5da73eba1006ed4c06bb06998f605d2911536570a8d1aa2cc92fdf00bf6fbd7c5ddfa33780319cc811b99753ea8509c6cdb550f561b9c5b58549b1ee5ed8c9d1eba5cda595854550864b765c06aff17f94e49c2a9ff78c4d629d74560c12addfe4f40a606d2ba9f3e11b9d068420e1cafa47c5fca7cc7", 0x85}, {&(0x7f0000000c40)="0ff336e6f48ba6735981c806ed5580f54c8d8772c51e3e19aee4e0402c86da642c2920e96c0153cb3866495e77322cd292d4ecb0f7e6dcbc16ae8c51da37b0bd9b72e41f1e4ba503056f8276c80b6cd27627871d66cac1287595b2f9440d3cc4b449616dfc37c6214e42ee3e57ba676b07f8516534c765a0028dfaa978d9282a138603419e2bdedbe747e6da3df01b5ff40a8e9aa33977c87bdfe91e2018b74f00f62b67e3dab5fb101f5082b3b788b09331e565c821fb960c4ce645a2c90d2fb7e0f43bdf841e88e8ced67ca8b8e4d1570b5544fec1a9fa70a17d460a18db9e", 0xe0}, {&(0x7f0000000d40)="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", 0xfb}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000000e40)="95d64f5676aa8100e33652a5da93b1c8370bded63915895ae6d8620282df2700d52896ddf0f29171eafe2415733a404080e701f59e7fe14031d1d5c4e1ac2377faecec3c16491d2e2e4780b2d0a514c8e54ff25024c14f4121a5a24771d0fd2028f473c6210251fc7dc3fddb3db103cfc46e59e8cb470bddc95d3c4d6ae90ae1662cb3d974dbd75640f2e5fc092f587b24f3d208a50bf4b4f00b9680b29de41322d8d3b96cf4e68273b4d513f423881df342", 0xb2}, {&(0x7f0000000f00)="9962d0f137bc1622f96a3c82a256566ba6869055a56e1a2f49c621205809e61791118f71cbb1cec940bff953bb25526ed1d9392a8bf030b2cb36440d68b1d203ebd4dc5af693d4510bb6f8a22d74e98c8986674906823c37c3207c84e75e420130ebb98b6aebb70e285f29c526b7d818fdfa6a0dd8dfeafa60f4ba30f8e968da522d3012bde26a6f0a6103929ab02d4e5b4ca08719827e5e0778b9d4b91b6a376bd3cef7b18f315a6e872023a08bf02fe97d0ee0681072d9b27bbb3e7634d05a51c0f52760592e72d40bf354cfe413f3e95ff410fd065671a63ef1b0", 0xdc}], 0x7, &(0x7f0000001080)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x76}}], 0x48}}, {{&(0x7f0000001100)=@pppoe={0x18, 0x0, {0x2, @local, 'caif0\x00'}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001180)="3b3688ba65ecaca60af97a66fac0379c65119d7e1a6be58f32db911dfe941e191b55236af2437ac5abaa58f5ef3d", 0x2e}, {&(0x7f00000011c0)="e64d369ac9be5f9b307eed6c390e79d63d2fc74f0a8b9fb44eae82a62e0965479e89d26855f6ae2a86996c04e52144853301f6d48fe18d91cd02ca47a1dfc2bc29edef39d5c633e5077977aad17f4818dfb6a3b9dd7f979241a362c70018611b00374d015a1f4c71eb20e7e8d96c41df2f3c38a141aae6ba0d9023109215b96cb705495669c50c36be2c0276c405b94463e7426b9352", 0x96}, {&(0x7f0000001280)="e4d45424c2ecc2aaf34b76cd69b3148bdb55c58293d42990c6e5c1e803951e38dd9c20c86791b1b24459c9793e7de77f2f67756e87477305486efe53019c661a7fad2ecece432bb9fa8695a29eb076ce68", 0x51}, {&(0x7f0000003780)="07437a2e6edacc8454ef71990745f67370f56f5c480967fc73d340cf9e2afe9448b42187f1e3b74d67a372be0951a7d92ef4fb4af105da442e14bda79022b082c86c3639d646e98a4f60ebad29f0c26f8ba8d5dbd86f1103d9a7afb2250cb15f33f1512ef59fbe0316852d38c39eca19a25982426ba7d46ca9b5dc9faa5534caebec3d75f6ca215265d544141995d07462f3a92935be75d805ca633ff5ee6511c20173f822f00065922435fbe4e3da8ec2ff23523cc62d65f346bbe34ace3d2f77ef1cd568d6b6e5d7cab6a6258c8313dddf75b1aa496320f07b4ef2f2f90758343b5fa864d38a23e7c59e0b1fbb57a5580456546e58e1d7057d58a490b37d891f8f39521a53b40877aaa4ca9e4ce842b067388a2c75313d2b93e1217db8636af5f5f34873f1a2cf1b0db3b5f4e8f1f6c62d56ed3ed3135793582eac26b61d99086a2b840457f186eb390d380e8be2e81e2d7dd3b7f0b1cf1a813b7dca2785e189a7fef945cbb38bc8845207a8144a71ccc9d79f658f697c62b1b6ac262fd7d8927896b109bab25f0c5e048a2250833e2f338bc7485e201701905cde801e7af2b8e826ab20094e5766979866093d9045d37f2a60e75bc6c799772cae738eb45ad7dadfdaf5f5a4adfc85885e4611ce559092f053226931d53149b6d78e0e66f055bd0eb1ea4b8b0e07aa89df15028b1d12a0f265f1bb3d502f1e84ca0d967f5c5e9c683d97d9ec34d8b9ce3d79e5d84075e2392d9d90201ebb8b357f2064ce7b16d9f7fe6fee5d34d249ccbfbe9e81cafca6a737a23c6ae14c038ce31c6956783e3a339e5b3c2614f4fa72ad595584ecdd3323250a9afa90366108750c5d52ea2b985becae837505bf8c1a43c2c19af6d7f9034602adc7275f0853f032a6a99225ed51c9821cdcd01fd570bffdcd0805cd8ec288b6e4ffe073c90595add3d24baa656c610d32e96f78ec3d85ce438e069a8dc3ff1b310d27fe1549bd72ba9cc33625ad2000a65fdc4cc7b0ef4d3ea856b3591d4a81c9624e63d92433b37adcba42ce08e71e44bc96ab765dd06c5e83c8e3ffe644705f2490d96aea7ece7b144e1e85991456f220cf74651a68ade725415c82efa503c53edf7a949d180bb7144f3091b8a1035375f8e872325b0ba477ac5b8b8ba247d30f4db0213cbeb8c6f6b5055c4f0c0b2d6052a6ea0eab9e740eaf7d948ea1f73c132c924d9e0360d6dea47b16853e79bfa2713adb2ca7c2f49f025263228861e0c1a099a0ad98fc252c90ebca427737a47ce33512bd47d8239d70bf7cda909c967370284d8197751b67106ff913c6dfa86bea1a8102142090bbf07927392451be0103f1b46908ac542417ae988609cbcebdd5ab511cf2d2bc2c688d0dc413b06923c28e0373d61e24173acf4a0b260533296eac6763478337b80cedcd9551463e5cbd260755ddeee7513bb109aa074dbeb78a2771d0f3bb5fc0e7cd49e680701cb9b947a0148ef76242fc1c3b5de49aa8723b6403f2e32ad90da5e221e5db0a3429a7429f49c0697294cd6a693d75eed2e116f83a0151c144e30856f8c140c7487d90712bb51b411ed16d4ce6d1267ae370ece6608a18e838175486b44323ce9add5efd6f5a4d0b9170b6dc4a629276be1594ea655f6c367df028369301e4b3a285c9e6c1f5dab12f9cdbaaf21b35ccc3ab686a9bfbdaecfa074443931e1e61da38a24c22f70e71737be788d514e8a7c7c4c08f0bf72cc9474afb11b1df89b693f61cdefe414e997c4f5156dfd6472f8d3a4397ffc370a4272ae4c992d3c20b04149d37b2fc101a568363725a2ea3832faed5aa648d24207cedecc97409c5385ae5b69f712f43ad5822f70d7b69e627d0f90680f79061cc9fb9f5563986deaefcf6d5148937a65e06944f74ea08031fc6cbd41e9f6fb61fec3b77cc50aeadd51263ba81e2b9cfccd592018eef0c1733e718f1f58b93630366602def3b8bd5ebb8c2eb80837996cffd8848e53f5647774493c6d130cb66f1833dcb4167ecaa65850cc5b5262418322d32f685859f0c1113f42cb4f46d944ebfde1a7039941372e0f03db5099e5bb1cb9e825bc9d197dd034b727d78c9b9031175cd4bab5d75c869685e613da4f352f5d735c55328172e32762b2f9c461a7236ec0fce306f73dda3fd63911996398b0b389adddd59b36a76ef2e1e39c61da1d546fc8bac7e806285339f89146c3a7844949c84507dd494f5309007bc630100dac1b005d28e19504a92880af4ceaf86e3da884062608b12d86aa33c78d0bade1613811c0a3c4e427c84f2dc737d5d9d7028ec817657fb6b8c9d8a2c51d5742e8dbd604a74707d34eda15f92091a8bc545637c694d20267d5ef427ef7367a470dca36a69ca1a617ca0ecd5651bf035d88650a7357eddda7d479b04ffb777e55c153688ee46c666558ea465576a0fafb21f2d2a00415f0ef7e3cdd69e3f218794c91f25379feca032bb6248e2d8c6d44a73c75217ad3dd334ddfd52c3c0aada70421e0ec9c737dcb9b4fc5ced2477f74a0e129701ea663c37880b67fe8cf3833393507c2dfcfbba8da2183b51164838901cbccfd19f9426482746c2ab80413581c240a54d64da33678b120f8f490afc7e4f2b1790dc19bea68b8d2a88cd6473d6b0c8a41b13246b8f2775a2553989ea10627a85dc4badbf7ef1512f566a979eda8b5cf2608b3c905650423cfb5b9583cd5185cadcb45a974e2ef42257226be72a7e3bb9b5f02bcf23743309b1261ac5aa042b175571ce3a2747750a75d5d1102113fd1df8e32bb2ede0021ce7b88644bbef17c477fb5efa4e6d8099f1ebcd1316124d1d668c174bc7bacf4e5a17d6f0841c1105658ee663e4c5813378ad3eb758883f09ba0458a25840a3b378e8d9dc07a238a39469d449f0aee0b1515ab9c5b7282882d096fdd91d27c5c0719de7a54ed216ac45ff94d8bed81595b41acf4c4a06e9087a2f145c8fb085a7004f73932b59f805f8767b0866deb641acd6647d326a5efa470050f662a4ee1e431e06f07f0e4aa68174c68ee17e5694dc1c562ac0575e05315acc1044b190da43c2a410e36e27e143de5fd08687e14af95e5d955d8e028a9c6acdabe1e0b7fe1626d1f1cb05077b1c157b3ea78e17708181e1f9dcbe86482191c011b7ac3a527ef2326f814a007f9450df973f8a6a2e6ebd2db5d2784f6238e87993e7f0cd13a30c769258798eb66a86b295a9bce1bfc1c1bb46cd27867ad07fef6304d09ae74e69e3173da830748897ded5e9f445a36af0ce36f23e2b27ea5bcf29d79414381b61096be5e45329c430a4f5bcebfe640092247b6e6ef84d4b329fc6932020f76d7aef1abf115901b6b702483a8d024968aa2ae3d54a68c2cc305335bc633aa36623ceae8b450160e5ae3c877f6e0cecaa37a13a83cf8b78a27c2e5331f9baa7aa2555e7467d2730a4c68014388b743c5b84f826d2231475461d12c75c98967193045bdbe489a59267b62974366e0a40cc7b99a8a194a9238f40800b651d306daa0a6cf25b56436294cf503f0208db90bc15910cfbde3d610ad0e035e781c7668a0441fb0757432b16937fc7c2db1224350ef3a111933344a79655d509ddc592e6dc87664bf93edcec9eba17ab7adb10bc207a052b3bc62858b44acbb5eb112c5cf13589250a02a32249551e96582d0623e874207e3201bab5db7b6caf8c39597bd683a8987f735ddc3295838b155499a5ac3247a3ff1b13050e5a5b88dd407b31418732860eedfc2ba07943e39d148cfe20e885d7b4c7d2f6e3875aaf452f7d8992ddf00d997bd0783655ed2c468f6ec17a719fed3085a160b82310c4bd32748cce172380cb280decc22679a512da4248f7818e464384ed92b7ad8b19258d4e5ed26b18b7ec3a2b9756ce628abbb20d8a00342d49ba5b75bc60df95f093e31f526026747b22c0813f6aa167bcc9cbc0c5e7999f890ae2e096e43e60a77ada294b0700bfa7190f4f5a22d4fd63214d4614c7d56325d1415f6dacb071c3e5cc5903ef8ffb4f2bba5a79374b8956201a80e989a60802756c3b8b9bdd3d0e636bd1129a7bcc990de96b4167702528904bfb1b371d51cf1ffa43ddcb959a5426fda30388c46ff0d373a3aae4e34350cd81aa6c00787a70b135d858fbc951d7f7d530ed088bce6a2bdd8b029bd84445ada92f10ae0e4b5e05e7c70217fce90d4d3dfce9b09531b146313b5962015d9dc7079a1fb6b2ed6de88df53d3ff7e2dce0b6416616a50cd348a3699bcf3e2cfa25113786000defe84265dda7c6aa005b44625c32e0e77bab70ea003b3d74172064d03ea34a86f9989098069e5232fd00533b5fc420c27e292f9c4a96c05975cfb2baa6a4e4b0a153503c9e90db2d3a1a948ff85081b931b96933d62ebeebb27a9e75886f94fc8ada8d8dc52b5a6c330b1d86a4842a85ae6046a183ce0a62a0192188a1e0063c8d60cd519001963d7a02ed2331d7a29e684a0efbe6e197e240142f36b9c37d8defabb6fccb57f5b0982f61fadd9ba2899e8573545722ad1960a905fdf91961280a006be593677e0787d07f0725069356a6cbd162c3f9989b88fe62e6e3a81bf83830cd5a374ab3be893bdd4339dca7e939fb5be5b996b783da80f16cb5614f9b7dc19a1a994d232aee7229a29bc963f11a896313dd13fdb3d646ebb224d7a480d5ab30124ab85f4d39d553d95c0dbb6e06c4c19d84c8c5ccd810da96835645ae09c1ad1c2f01434c729a5d01197910fd678e8d7bd4f45f3db7f6cca11af885ae03eb15def0360e54dc465dbdc8e8950977ad9a0ecd30cdc129fcd6dd4c8b1dca0eb8432638670d6b0a1af34ad3a9e0c5e3a66f1dacb3d694a09c503337f9ad06c43a8c6e69939208a526e0883aa85378dd1b65107503a37e06b849e1e46742aa8c13f2aee0f300eb28c415d70f94942ec217ead726fbd8a42f171c7a225d23e426c5c5143f8f8e32f0affb05e96b6c8ae80ba471051b2df70e57bc87b039542259eb31343db45f085bd155225abded1d06a89f261d342567709b1c58b349d8af5020702b15f510e6c12384e79bd56cd6321cdd6c6cadb9bceb01ddedf913c0a9dbef52b6dbc4bfa8a8b9c71cfc99fc5281516417b8ff40704697ac94871987ffe5aaf46a239a9e5f99fc5929d4fae0015974d6151a2dab267541169c61136f8ea10746a1ad1f62cac17d3836a26d4e9bf33d558dbdf8c1823bbdd49aefb859821834e30dad87e010ae342b4884b9b3dec02d6d629d277e4483449b68f8cea4dd536aa82b3ccf6fd689243fed660fecf00bd2b5757cea56a004494cb6b715d0228e90697bd8bd3852a61d3b4e51c4fc8c2f34c1acf6d771cf471fe6b5c866f95c359e0770c8facbc5277052992352c3f2a7cc408957ebcec0b261ce4f3bbbe6f71e718e328e9c3cac38efa2415f46a07e7b21823424ae9099e523096890b7cda506ff7614b61f6b43f8c84416c9a1fcfaa537d40c4c92479a289a267c7d4b3579131c6bfe64db292ee36f3a485eeb0ba18849bdd17e204d74a584ae7d01797bb6ad8a8721ce7a7be5fbc81b73aa1d81765262a5cb6a72eb3adb9c13bb8ce81b575ca15a848f0144331c98beed13ffb5c110a5b0b7020cc598067bd646410a67b7c9d50c5e99ab7c5b8ae10164508dd71c8bed78755b099199d360028c7883d9faa84ef9eddd895660baf894206097dbb4c9fdad152eaf51d8eff7517347ffcac0c6bba22a3f88e017f527a8205e1bdfd6789baf7d736b78d27e7051360165fd5006997a207c57d6f685c738dee3d0e9a80e0848b42d", 0x1000}, {&(0x7f0000001300)="c45569c59f832bc6444036c2c3b3e18049e128f3d3fd41b5b0aa707b30e4177a9bb550f54f1ec456e5d66b12c0ac9ba26b7dbc803a6a693b22b34389338a4299caffc8ee92369a5bc1f974d3c78f070e982a6c4a536e4fadd28af7f3cf883667e6d8b615866bc65d65a519", 0x6b}, {&(0x7f0000001380)="1a94f4a3b81054893b9da8c1b91284cf718acbc82d45079aff9b6c0410d451a16b5f9460a5ab40220cc1", 0x2a}, {&(0x7f00000013c0)="278b44d1f19ca17d6377c01b7924d18f2695bed452160b96a4f9c71fcc38fddbb6e59e0b911d8e9384d8b919f3e8ac0a5b9d0fbf000d1a40d52cfbdd8aed341d3f52becd635b9190a0ef02f9324020c7eb4ce34202f6be5eb845ed550822bb0ff70bd2f7db40d27eeff4b4f277387883217265b9e789ffa3ba899b0f5afb06ed2d99348228a02f96f159cc5a7754b81b3976fba93eeaee4f744712106b23255fc3fd8f6d4d033accf83b206287adb0e5d2256f367b886d41283432b5157d442d99825728ec32a192fc02201355ad499fae133acc2f302bef7fb683656b943ab16612d6c4422f1a1f355c8a", 0xeb}], 0x7, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x90}}, {{&(0x7f0000001600)=@nfc={0x27, 0x0, 0x2, 0x1}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000001680)="7c6e92826ab82ad1282adb7ca7838e7b2a9899640d6762a8c67ce36181e0", 0x1e}, {&(0x7f0000004780)="60f992b6ebce1958445df6e12dc61f8520b99623f4dd7c1563f84ad63c1ee8fe561ca8ec806133b1d4d5f2df87cf68bb75e68eb2d0c33ea8dfda73ebba545cd6159e312cb6794b78504950f40d39a3d21303358ea5eece28ae3c2450d9456217059e46dc1ad486f2153c19b0c825c9718ff664133866dbfad0f232e0ab60f9f956b307f14c63d871cd5a9566fa43d6c3001ec5cf922ab568e580203e9e7ada4a42004c7213ae79", 0xa7}, {0x0}, {&(0x7f00000016c0)="a0c5c52502fe9df3a83047c854c3f4a3c3cb6efe815afd9d1efbaeae3c508e3114736aab4443a69042d86e10a670cd9b9346579c14f5492c24b315ed52a63b1badc8b2c73e27a4063a2ab49df157218442822ae72fa96db6aed3", 0x5a}, {&(0x7f0000004840)="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", 0x1000}, {&(0x7f0000005840)="d8996ec8827fe6c52d80ba7f2fe39f49a4358d15f0221e9088e25c8ff9d76d6cd9e6ec589d828b8cf742b6fe405aa7cdd06a8f6b0c2d53700c91668c1a16b08ee601c34dbc451094a5fc391ea23040fd2ce3b4e12e6d2a42753cd3c3616e7740a05517b0fa888b4ae5fd979857c8832efab6082e26d6fcad915ba271860d2d0ab2b7d29509114618a47790163699d598e737367b6ed42b9d2305aa177f81a4a0ac780fd8a0175328c05527f6cec77be9e85298f59e05da0b8cb2f0e7615eac7228d9691b648a95", 0xc7}, {&(0x7f0000005940)="3d6ddec8562c78182f38dd7f2585475a2f055c906fdd21815923c601c23413459bde1b3ba667ceb50ac4f9", 0x2b}, {&(0x7f0000005980)}, {&(0x7f00000059c0)="aeb3aa64226162088742c96531272b9af2bb087bc9942f226a225fd946ad1b4d7442211dd1d7b2d25134c2e9b860aa9875070cf9a8d211dd0d0c87b86814623f7ca8b2756d94a125729a5ca693bcc98c283d1c5954309e6e80c841805c73d3e88356121403bad8663232f4bd6c700d46453946f5a9ba8539fb5e78ed2692f639eafdfb4d251aae19a83103902cb14208c641f8fa2928cfdbbdd07c6504657672dccb63cefaae8d9e1f1d40ce", 0xac}], 0x9}}, {{&(0x7f0000005b80)=@xdp={0x2c, 0x5, 0x0, 0xb}, 0x80, &(0x7f0000006080)=[{&(0x7f0000005c00)="078f3501c3d3383aa20a2bf65de35dd83a1e5c50d7e77a6f5bd709f4a61d6c46f3e153c278286cb9a71e5d53680545d046ffb3e1c22bb9286e0592a5651ce679c49934120ddc795abd3f676a0e37b345fb4211573ec157f4df0a28ae31e1ed4655b132345c1dbc8982b8f9a1173578705a22cf5f91797bd1836ba5aae7226a2add890db9817a3fe65685582ae7767c6bf48dbf25d7bd83d638bc060d6c5af0cc7461956e5919f4f35ec769", 0xab}, {&(0x7f0000005cc0)="0ac02453cbc38237d7f6707de414aceed946c35a035c", 0x16}, {&(0x7f0000005d00)="221b7bb0439801d10bfd218e5317793d59693281bf0c93ba802d10eb809bdc54bb3dd4a252f45984938ec3c21f514568c7dd", 0x32}, {&(0x7f0000005d40)="60c1e4f4136089924a43fc983538440a69d55900e4552c36b3c1db5751ba8550cc7b79c0aa0dcd146509c74045357833f37242e2b9b24b0ded5024ee2705d3854e640702f040cb064f71f77ef394d4596ee5a0563b", 0x55}, {&(0x7f0000005dc0)="cb8e19b01211e0f071437011ea63be0c06aed141acf258d49f732b8e9df982ed77dbbf4d6f02fdc34e3d0416b9234aadac25c61b4715751dc9b76f26", 0x3c}, {&(0x7f0000005e00)="8f606a74fce2894d73f3b333b5e5b280f1056d43de9b1ec8b910747ffe108e8ab2eaf64500cb5e5e7bb411ca6346cea06f65d59045ae24e2495869734bcf2c0b2eaf728f57337f44e9055f8bd70c24ace1005242f5fdb42fc69a2dd11fea6fb043ead0cca2c1f3b013aee9807519ecf5cee0bf85fb03006945e6e5567e9c", 0x7e}, {&(0x7f0000005e80)="fd1416b4a6b38fe03c408ea3b60eec8bb799b7a48599c67a0cc0e4187ec1466a9aa3a8c683a35d4aeb73318a7921ed94662cd1b1bfb5ee80c5e2089472aaa536624a463e4345af49788190a7e5713ed50f03c8bcba3e073ed4cf1caa3046b395f3811e2d18b6e7fef10cba1e70f0bcfb16e394676ccd5566c9930e4a156c040dd9664d3420dabada3ab03133bf", 0x8d}, {&(0x7f0000005f40)="6bdac5323c4af45caaa6f82ff8f60abfb25c6122e9c4cdfa9bfdbbd4af42c3e7d0a780c7b8c40076b12d812586162d31e9e0a614b053cfca6bc29351d4dde68da9ee58e5dc8caa2c5f82ca8065cb49849f84297ab104c29b208af9458180de0a5cdfc32a692b744f29b8a9a4c8e4af7805b7b6f678e7151533bf2c19d99faff8342f36322f56f627e10d4b", 0x8b}, {&(0x7f0000006000)="610305f4f321d70759d30dc64012296942e247ef5fe69a25f552a46f06bf4d3b413edacff3af4ff30b4f41a9d61cf5fc3def7a5fe27c778850191ed18174fd12a7f197eb5a", 0x45}], 0x9, &(0x7f0000006140)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x7, 0xc004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x1}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000005980)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x7fffffff}, 0x1c) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x3, 0x0, 0x4000) 09:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3b000000, 0xc5}) 09:15:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xae01, &(0x7f0000000380)) [ 570.056079][ T8613] binder: BINDER_SET_CONTEXT_MGR already set [ 570.116064][ T8613] binder: 8609:8613 ioctl 40046207 0 returned -16 [ 570.116973][ T8616] binder: 8609:8616 ioctl 402c542b 200000c0 returned -22 09:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3f000000, 0xc5}) [ 570.163417][ T8613] binder: 8609:8613 ioctl c020aa00 20000240 returned -22 [ 570.193907][ T8622] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x400448c9, &(0x7f0000000380)) [ 570.282930][ T8622] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 570.309237][ T8628] binder: BINDER_SET_CONTEXT_MGR already set 09:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xff000000, 0xc5}) [ 570.339655][ T8628] binder: 8614:8628 ioctl 40046207 0 returned -16 09:15:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40045431, &(0x7f0000000380)) 09:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xffffff7f, 0xc5}) [ 570.516511][ T8618] binder: BINDER_SET_CONTEXT_MGR already set [ 570.532916][ T8618] binder: 8614:8618 ioctl 40046207 0 returned -16 [ 570.550214][ T8638] binder: BINDER_SET_CONTEXT_MGR already set [ 570.579023][ T8638] binder: 8614:8638 ioctl 40046207 0 returned -16 09:15:06 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3cf}) r1 = semget$private(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) semop(r1, 0x0, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f00000000c0)=""/206) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xa9}) [ 570.740751][ T8611] binder: BINDER_SET_CONTEXT_MGR already set [ 570.787339][ T8644] binder: 8609:8644 ioctl 402c542b 200000c0 returned -22 [ 570.798068][ T8611] binder: 8609:8611 ioctl 40046207 0 returned -16 09:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:07 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x100, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x1}) 09:15:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x400454ca, &(0x7f0000000380)) 09:15:07 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r3 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000000)=0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 571.048672][ T8662] binder: BINDER_SET_CONTEXT_MGR already set [ 571.078593][ T8662] binder: 8657:8662 ioctl 40046207 0 returned -16 09:15:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40046207, &(0x7f0000000380)) 09:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x2}) [ 571.143400][ T8662] binder: BINDER_SET_CONTEXT_MGR already set [ 571.159024][ T8662] binder: 8657:8662 ioctl 40046207 0 returned -16 [ 571.193204][ T8664] binder: BINDER_SET_CONTEXT_MGR already set [ 571.214864][ T8664] binder: 8660:8664 ioctl 40046207 0 returned -16 09:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3}) 09:15:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40049409, &(0x7f0000000380)) 09:15:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000240)={0x9, 0x0, 0x3, 0x3, 'syz1\x00', 0xcf71}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40247007, &(0x7f0000000380)) [ 571.399555][ T8680] binder: BINDER_SET_CONTEXT_MGR already set [ 571.415683][ T8680] binder: 8676:8680 ioctl 40046207 0 returned -16 09:15:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, &(0x7f0000000380)) 09:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x4}) [ 571.504303][ T8683] binder: BINDER_SET_CONTEXT_MGR already set [ 571.525577][ T8683] binder: 8676:8683 ioctl 40046207 0 returned -16 [ 571.550811][ T8685] binder: 8676:8685 ioctl 40405515 20000240 returned -22 09:15:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700e, &(0x7f0000000380)) 09:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x5}) 09:15:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x6}) 09:15:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008af14, &(0x7f0000000380)) 09:15:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x7}) 09:15:08 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff}) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self\x00', 0x147b81, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0xac, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/63, 0x3f, 0x2, 0x2f}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x440}, @register_looper, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x110b}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}, 0x40}], 0x1, 0x0, &(0x7f0000000240)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x900, 0x2}, @flat=@weak_binder={0x77622a85, 0x1009, 0xfeffff}, @fda={0x66646185, 0xa, 0x0, 0x2e}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) sendto$unix(r3, &(0x7f00000000c0)="68c72fb19dede026b963911aed27d2df2fc9c696e54bd010ab52d2e959a6685ab7c562a76c7724c65011f1eab1d16b882d3fac6d4165d0a901f22e3fd42d4d3f8baa2405a298ecf7dff50a48850d551de1e34c91", 0x54, 0x4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 09:15:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4018620d, &(0x7f0000000380)) [ 572.138193][ T8702] binder: BINDER_SET_CONTEXT_MGR already set [ 572.146707][ T8702] binder: 8699:8702 ioctl 40046207 0 returned -16 [ 572.174519][ T8702] binder: 8699:8702 ioctl c00caee0 200003c0 returned -22 09:15:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x8}) [ 572.183224][ T8683] binder: BINDER_SET_CONTEXT_MGR already set [ 572.189456][ T8683] binder: 8676:8683 ioctl 40046207 0 returned -16 [ 572.191592][ T8710] binder: BINDER_SET_CONTEXT_MGR already set [ 572.216328][ T8702] binder: BINDER_SET_CONTEXT_MGR already set 09:15:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40186366, &(0x7f0000000380)) [ 572.237727][ T8710] binder: 8676:8710 ioctl 40046207 0 returned -16 [ 572.248231][ T8702] binder: 8699:8702 ioctl 40046207 0 returned -16 [ 572.266007][ T8680] binder: 8676:8680 ioctl 40405515 20000240 returned -22 [ 572.320973][ T8709] binder: BINDER_SET_CONTEXT_MGR already set [ 572.327533][ T8709] binder: 8699:8709 ioctl 40046207 0 returned -16 [ 572.340982][ T8702] binder: 8699:8702 ioctl c00caee0 200003c0 returned -22 [ 572.351291][ T8719] binder: BINDER_SET_CONTEXT_MGR already set 09:15:08 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x91}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0xe5a}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x94ae}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x66f}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7c7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x74}, 0x1, 0x0, 0x0, 0x88001}, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KDSKBLED(r3, 0x4b65, 0x87) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xb}) [ 572.377651][ T8719] binder: 8699:8719 ioctl 40046207 0 returned -16 09:15:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4020940d, &(0x7f0000000380)) 09:15:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) prctl$PR_SET_SECUREBITS(0x1c, 0x6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r4, 0x10, 0x1, @in6={0xa, 0x4e23, 0x2, @private1, 0x7}}}, 0xa0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r5, 0xd, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)=r5) r6 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x3, 0x0, 0x4000) 09:15:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x17}) [ 572.574022][ T8728] binder: BINDER_SET_CONTEXT_MGR already set [ 572.615724][ T8729] binder: BINDER_SET_CONTEXT_MGR already set [ 572.629621][ T8728] binder: 8722:8728 ioctl 40046207 0 returned -16 [ 572.634063][ T8729] binder: 8727:8729 ioctl 40046207 0 returned -16 [ 572.668497][ T8728] binder: BINDER_SET_CONTEXT_MGR already set [ 572.688150][ T8729] ucma_write: process 2817 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 572.737542][ T8728] binder: 8722:8728 ioctl 40046207 0 returned -16 09:15:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x2328, 0x0, 0x1, 0xfc}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40247007, &(0x7f0000000380)) 09:15:09 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='md5sumvboxnet0user-proceth0self\'\x00', &(0x7f0000000180)='bdev\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='cgroupvmnet0\x00', &(0x7f0000000240)='cpuset\x00', &(0x7f0000000280)='#&\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='selinuxmd5sum)\x00', &(0x7f0000000340)=')\x00', &(0x7f0000000380)='@system\x00', &(0x7f00000003c0)='&\x00', &(0x7f0000000400)='cgroup:,wlan1\x00'], 0x400) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3b}) [ 572.895558][ T8749] binder: BINDER_SET_CONTEXT_MGR already set [ 572.915509][ T8749] binder: 8747:8749 ioctl 40046207 0 returned -16 [ 572.996723][ T8755] binder: BINDER_SET_CONTEXT_MGR already set [ 573.025453][ T8755] binder: 8747:8755 ioctl 40046207 0 returned -16 09:15:09 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x600, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0xa) getpeername$l2tp(r1, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = openat$cgroup_ro(r4, &(0x7f0000000600)='cgroup.stat\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x3c, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) 09:15:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)) 09:15:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x300}) [ 573.046644][ T8761] binder: 8747:8761 ioctl c0206434 20000000 returned -22 09:15:09 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 573.204189][ T8771] binder_alloc: 8763: binder_alloc_buf, no vma 09:15:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x500}) 09:15:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4028700f, &(0x7f0000000380)) 09:15:09 executing program 2: r0 = io_uring_setup(0x61, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0x3, 0x1b1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x600}) 09:15:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80086301, &(0x7f0000000380)) [ 573.678778][ T8749] binder: BINDER_SET_CONTEXT_MGR already set [ 573.687611][ T8749] binder: 8747:8749 ioctl 40046207 0 returned -16 [ 573.699912][ T8794] binder: BINDER_SET_CONTEXT_MGR already set [ 573.732950][ T8761] binder: 8747:8761 ioctl c0206434 20000000 returned -22 [ 573.747034][ T8794] binder: 8747:8794 ioctl 40046207 0 returned -16 [ 573.747056][ T8755] binder: 8747:8755 unknown command 1077936176 [ 573.783006][ T8755] binder: 8747:8755 ioctl c0306201 20000280 returned -22 09:15:10 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000e500"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) msgget$private(0x0, 0x21) 09:15:10 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x1, 0x5, 0x4, 0x40000000, 0x9, {0x0, 0xea60}, {0x5, 0x1, 0xc0, 0x7, 0x5, 0x0, "46a86ef8"}, 0x4, 0x1, @offset=0x80000000, 0x8, 0x0, 0xffffffffffffffff}) ioctl$FBIOBLANK(r1, 0x4611, 0x4) 09:15:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x700}) [ 573.952338][ T8805] binder: BINDER_SET_CONTEXT_MGR already set [ 573.965262][ T8805] binder: 8799:8805 ioctl 40046207 0 returned -16 [ 573.990615][ T8805] binder: 8799:8805 unknown command 15007744 [ 574.023243][ T8805] binder: 8799:8805 ioctl c0306201 200000c0 returned -22 [ 574.043711][ T8812] binder: BINDER_SET_CONTEXT_MGR already set 09:15:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80087010, &(0x7f0000000380)) 09:15:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xb00}) 09:15:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = openat(r3, &(0x7f0000000080)='./file0\x00', 0x80080, 0x141) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e22, @loopback}}, [0x40cd, 0x800, 0x3e062c10, 0x1, 0x9, 0x2, 0x0, 0x7, 0x3, 0xfffffffffffffffe, 0x8, 0x0, 0x6, 0x7, 0x7]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={r7, 0x2, 0xdf7}, &(0x7f0000000400)=0x8) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x8, 0x9}) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) fcntl$setsig(r8, 0xa, 0x41) [ 574.073000][ T8812] binder: 8799:8812 ioctl 40046207 0 returned -16 [ 574.090807][ T8805] binder: 8799:8805 ioctl 80207011 20000000 returned -22 09:15:10 executing program 2: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000340)={0x1ff, 0x2, "dd757c4f67dff39507abecf8ae785f9cd0f4027e5ad005b50cbb2483fb8e5cc7", 0x800, 0x3, 0x1, 0x0, 0x80}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000240), &(0x7f00000002c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x1000, 0x9950, {}, {0x4, 0xc, 0x0, 0x81, 0x0, 0x0, "cd3b30b2"}, 0x5, 0x1, @fd=r4, 0x7f, 0x0, r5}) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d02, &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 574.152096][ T8812] binder: 8799:8812 unknown command 15007744 [ 574.160628][ T8812] binder: 8799:8812 ioctl c0306201 200000c0 returned -22 [ 574.191937][ T8805] binder: BINDER_SET_CONTEXT_MGR already set [ 574.200490][ T8805] binder: 8799:8805 ioctl 40046207 0 returned -16 [ 574.209873][ T8814] binder: 8799:8814 ioctl 80207011 20000000 returned -22 09:15:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80087012, &(0x7f0000000380)) [ 574.245774][ T8822] binder_alloc: 8815: binder_alloc_buf, no vma 09:15:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x1700}) 09:15:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000480)={0x5, 0xbb85}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x54d83, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$eventfd(r4, &(0x7f0000000000)=0x8000, 0x8) 09:15:10 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) r5 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x9, 0x200, 0x7, 0x1, 0x3, 0x8, {0x5, 0x1, 0x282, 0x40, 0x1, 0x6, 0x2, 0x260, 0x2, 0x6, 0x0, 0xc63, 0x8, 0x3f, "9b261468c9fedb28e5923a79396fdbd7f1290d4319cd38451d6adcdeac256671"}}) [ 574.344729][ T8823] binder: BINDER_SET_CONTEXT_MGR already set [ 574.352193][ T8823] binder: 8820:8823 ioctl 40046207 0 returned -16 [ 574.390669][ T8828] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 574.439588][ T8828] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247008, &(0x7f0000000380)) 09:15:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3b00}) [ 574.501453][ T8837] binder: BINDER_SET_CONTEXT_MGR already set [ 574.536244][ T8837] binder: 8833:8837 ioctl 40046207 0 returned -16 [ 574.585573][ T8840] binder: BINDER_SET_CONTEXT_MGR already set [ 574.588252][ T8842] binder_alloc: 8827: binder_alloc_buf, no vma [ 574.595877][ T8840] binder: 8833:8840 ioctl 40046207 0 returned -16 09:15:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247009, &(0x7f0000000380)) [ 574.652082][ T8834] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 574.685535][ T8834] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3f00}) 09:15:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80287010, &(0x7f0000000380)) 09:15:11 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) [ 574.965526][ T8822] binder_alloc: 8815: binder_alloc_buf, no vma 09:15:11 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x103280, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)={0xfffff800, 0x5, 0x4, 0x40, 0xfffffffa, {0x0, 0xea60}, {0x5, 0x8, 0x1f, 0x75, 0xf2, 0xfe, "699c230e"}, 0x5, 0x1, @userptr=0x4, 0x6, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fff, 0x9, 0x0, 0x1, 0x3, 0x8, "a8cecb4d8dd2c6828942fefd01b2e03e04331c8fc6934419ae02ff76018f773cb23d025825f76771ea338fb10a5d619b785c0d15709fd222e0c8bd430c61f43c", "cf3b0151535a25659212a9ba82f8cd6cef3c107c07c3851deed4b31e6bc060464ca3efd593b84e9f765792532726e3d27cafaea61951ef1dd7429590163ed56a", "d50de3cdbbd8f275a14dabc3d98a3fc15cf13511605f60d572423f9737745f1e", [0x6da5274a, 0xffff]}) 09:15:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xff00}) 09:15:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0045005, &(0x7f0000000380)) [ 575.107967][ T8862] binder: BINDER_SET_CONTEXT_MGR already set [ 575.116667][ T8862] binder: 8861:8862 ioctl 40046207 0 returned -16 09:15:11 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100e0ef69aa779932392f74bd52c40001a69fa57cc1b1f73b78b721ba22a3c775221eb4cd1571c72167bd23befe43f69575ae00000000000000000000000000000000000017", @ANYRES16=r2, @ANYBLOB="90002cbd7000fbdbdf250400000005000100010000001400020000000000000000000000fc0040000001080005000000000008000601800000000000000005000100000000467c555700000000000000000000000000005264ab1400"/101], 0x3}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000054) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40010) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000480)={0xc, 0x75, 0x1, {0x1, "93"}}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet6_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 575.182804][ T8865] binder: BINDER_SET_CONTEXT_MGR already set [ 575.189088][ T8865] binder: 8861:8865 ioctl 40046207 0 returned -16 [ 575.233053][ T8876] binder: 8872:8876 unknown command 0 [ 575.240508][ T8838] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 575.264922][ T8876] binder: 8872:8876 ioctl c0306201 20000200 returned -22 [ 575.280943][ T8838] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 575.285714][ T8880] binder: 8872:8880 ioctl c058560f 20000200 returned -22 [ 575.322431][ T8880] binder: 8872:8880 unknown command 0 [ 575.334741][ T8880] binder: 8872:8880 ioctl c0306201 20000200 returned -22 [ 575.342637][ T8877] binder_alloc: 8827: binder_alloc_buf, no vma [ 575.375290][ T8883] binder: 8872:8883 ioctl c058560f 20000200 returned -22 [ 575.431429][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 575.437448][ T8885] binder: 8878:8885 ioctl 40046207 0 returned -16 09:15:11 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x9) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x1000000}) 09:15:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0045878, &(0x7f0000000380)) 09:15:11 executing program 2: io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x3, 0x0, 0x4000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/195, 0xc3, 0x2, 0x1c}, @flat=@weak_binder={0x77622a85, 0x800, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}], 0x0, 0x2, 0x0}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000002c0)={0x4, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000000)=0x1) 09:15:11 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840030000000000000000000000000000000000000019000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="061000000000000002000000000000003200000000000000852a646600000000dc343d95884ba6264c066cc2c27640e5f89d", @ANYRES32, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/140], @ANYBLOB="8c0000000000000001000000000000000200000000000000"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\fc\x00\x00'], 0x0, 0x2, 0x0}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xc, &(0x7f0000000080)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x3230c1, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000050700ffff7a093c7e0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffffffff"], 0x3c}}, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x1}, ["", ""]}, 0x18}}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x19c, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x8, 0x0, 0x2, 0xfd6f, 0x401, 0x9}}, {0x16, 0x2, [0xffc1, 0x7f, 0x8000, 0x8000, 0x7, 0x2, 0x101, 0x4, 0x0]}}, {{0x1c, 0x1, {0xf9, 0x5, 0x224f, 0x5, 0x2, 0x1ffe0, 0x0, 0x1}}, {0x6, 0x2, [0xc3d0]}}, {{0x1c, 0x1, {0x3, 0x4, 0xfffc, 0x401, 0x2, 0x3, 0x2, 0x3}}, {0xa, 0x2, [0x200, 0x1, 0x1f]}}, {{0x1c, 0x1, {0x1, 0x0, 0x5, 0x3, 0x1, 0x1, 0xfdb, 0x6}}, {0x10, 0x2, [0x3, 0x8, 0x5, 0x101, 0x9, 0x3]}}, {{0x1c, 0x1, {0xbf, 0x1, 0x3, 0x4, 0x2, 0xb1, 0x5, 0x6}}, {0x10, 0x2, [0x660, 0x0, 0x5cea, 0xfff, 0x9, 0x8]}}, {{0x1c, 0x1, {0x8, 0x1, 0x200, 0x0, 0x2, 0x7fffffff, 0x920, 0x2}}, {0x8, 0x2, [0xc1e1, 0x1000]}}, {{0x1c, 0x1, {0x69, 0xa8, 0xfff, 0x9, 0x1, 0xfd, 0x2, 0x3}}, {0xa, 0x2, [0x2, 0x1000, 0xfff7]}}, {{0x1c, 0x1, {0x5, 0x7, 0x3ff, 0x8, 0x1, 0x10000, 0x8001, 0x3}}, {0xa, 0x2, [0x7, 0xffff, 0xfff]}}, {{0x1c, 0x1, {0x3, 0x5, 0x5, 0x5000000, 0x0, 0xff, 0x5, 0x4}}, {0xc, 0x2, [0x8001, 0xd000, 0x5, 0x0]}}]}]}, 0x19c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', r6}) [ 575.501444][ T8881] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 575.535098][ T8881] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x2000000}) [ 575.648628][ T8891] binder: BINDER_SET_CONTEXT_MGR already set [ 575.665274][ T8891] binder: 8887:8891 ioctl 40046207 0 returned -16 09:15:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0045878, &(0x7f0000000380)) 09:15:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3000000}) [ 575.735907][ T8891] binder: BINDER_SET_CONTEXT_MGR already set [ 575.738873][ T8909] binder_alloc: 8894: binder_alloc_buf, no vma [ 575.743260][ T8901] binder: 8887:8901 unknown command -1 [ 575.756381][ T8891] binder: 8887:8891 ioctl 40046207 0 returned -16 [ 575.769444][ T8911] binder: BINDER_SET_CONTEXT_MGR already set [ 575.777156][ T8896] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 575.790390][ T8901] binder: 8887:8901 ioctl c0306201 20000200 returned -22 [ 575.798746][ T8896] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 575.808305][ T8911] binder: 8887:8911 ioctl 40046207 0 returned -16 09:15:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0086420, &(0x7f0000000380)) 09:15:12 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000340)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r6, 0x1}}, 0x18) 09:15:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x4000000}) [ 575.988468][ T8919] binder: BINDER_SET_CONTEXT_MGR already set [ 575.998655][ T8919] binder: 8917:8919 ioctl 40046207 0 returned -16 [ 576.043533][ T8900] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.071816][ T8900] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 576.086329][ T8926] binder: BINDER_SET_CONTEXT_MGR already set [ 576.097672][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 576.109701][ T8926] binder: 8917:8926 ioctl 40046207 0 returned -16 [ 576.113160][ T8885] binder: 8878:8885 ioctl 40046207 0 returned -16 [ 576.301517][ T8882] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.342718][ T8882] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 576.471208][ T8909] binder_alloc: 8894: binder_alloc_buf, no vma 09:15:12 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x13}) 09:15:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b48fc9569e189071862f5006d29a17c4d107bb1750b23915a6d819ff66fecd9d70d1d871e21c198c04a4099ec7abb4bc05419c579ac939eb19cbdf03b1cf6cb19d54d92ff396c2276f3e5f150eab009a73040d4d005c327abd452eb2cdbc50c5c1b7926d549a5fa7044afac3965b69052b9cf3b178588b42f9ceeaebfcd934d43e1281016a7442698eb52f125b603c2c8815caa8fe35c7f5e123d04e9c35d965de686f5bf8e7c4bc713b78984e9bb626ff4f6268168e96f73f64f8d27b515a503a79b632627745dee700669efa315da30ac"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0xd, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x8, 0x0, 0x35}, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000240)={0x8, 0x4, [0x3]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x5) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) 09:15:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0189436, &(0x7f0000000380)) 09:15:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x5000000}) 09:15:12 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/rtc0\x00', r3}, 0x10) 09:15:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x6000000}) 09:15:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc020660b, &(0x7f0000000380)) [ 576.728214][ T8949] binder: 8945:8949 unknown command -1778628597 [ 576.744260][ T8949] binder: 8945:8949 ioctl c0306201 200000c0 returned -22 [ 576.757465][ T8950] binder_alloc: 8944: binder_alloc_buf, no vma 09:15:13 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 576.775507][ T8949] binder_alloc: 8945: binder_alloc_buf, no vma [ 576.783370][ T8919] binder: BINDER_SET_CONTEXT_MGR already set [ 576.790892][ T8932] binder: BINDER_SET_CONTEXT_MGR already set [ 576.802044][ T8919] binder: 8917:8919 ioctl 40046207 0 returned -16 [ 576.804155][ T8949] binder: 8945:8949 ioctl 80045510 20000000 returned -22 [ 576.810034][ T8932] binder: 8917:8932 ioctl 40046207 0 returned -16 09:15:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0306201, &(0x7f0000000380)) [ 576.893880][ T8959] binder: 8945:8959 unknown command -1778628597 09:15:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x7000000}) [ 576.938170][ T8959] binder: 8945:8959 ioctl c0306201 200000c0 returned -22 [ 576.938669][ T8949] binder_alloc: 8945: binder_alloc_buf, no vma [ 576.958080][ T8963] binder: 8945:8963 ioctl 80045510 20000000 returned -22 09:15:13 executing program 2: r0 = io_uring_setup(0xf28, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x0, 0xb3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000200)={r6, 0x7fc}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {&(0x7f0000000480)="7adbcd76af0d5850d5031a1a05ca7c836907be076bf94bbe2daa6b97455ea4cd5c3538307a63f0b2d46886226927ff3cd7828427f2325e88c613d0d6592b7afb4f639a427f8e0fd770340e13eebb366f0a71176f750ea112243fb8e6923146d69fcc4ef66173270f93571bf970f2ab53afafdcacc9fa5f83dc70c3d77689b4805d88af4b7ca12feb1e695060ec22f24395f57b3609be16fcf254376ac0128ee9b44d11ddb72b30cb1b1d51177f6d0ac97a6bfed85db99051d06a78f494edea3345c00033d6d3c9faa94cc2b6c9ceb750ca332e08d721d7827bfb44d09d4bfac868ae1254d8b94537f12a5c9990c8359de904a1e9a93eb18e98f84d3964ecfa6337a0a6c0635371ef4f957182a9c394af02950e803e294a8449ef8543a05db5fd92d5bc9df0b8ef2393956d78400b69da4ce609c4b32478409a468b593d20908296acf1088d2ab0f932e502278dd9ab60a9de729c23e6cb6fbacd7ca54478539e4c85633c4750fa904bf22a3ab21ee9127f44215c61aa314412903309ebd0f2b9a8215ed7c69c053c4b348860e36548b275274f56d5c44a20919a7c88aeea40b3ea3ddff8d43bd7a1c490d0649f824aa57be6d126f6e9278af76098b9dd4dbb2852bde2fff29dfe66fb985ac4a8ed02fea202e01ac23e72a829d435e506b42c6c369d9a4d7335190be714f2b09cd257028d790d5c2dc2fd1207d1f475914bff15f8d5f732628668c037f47d2af235e4bfbfe5026c2d86f6aa347eab858487322467999fd6e24af1f93cab8105de36f71551d8d2f3fe5281ec2eb65de97ca9a0c3e146cd8967fb56d08845a388121348245289dffbe944d802b18128cacb9980263b765422a97b37a073d4e88270c0fbbda60b8dce36930f273bb68a6f9857ec4647b8759cbf525d05ad98b39c30eb0dc93b2d4950092525cb501b0be28c5d6098150f69cee4e59bba55a0ad6b43e4594a2402ac5506754efce17d776396e559e972cadc329a1df9bae2125a08ab89a06ad82f6aacfa5220dbd7bf6fd14d5c6e6086524e5cbbf22991127a352107f9f7c262b1d4a40b8a320c5f1f7fb2c22abc0c509f56c5885d8d182f59e873e39c157980f6ae55ecf2d7392bafe91218dc692a80c018d840f781a0f7f73475533cd8fd5796a176f8bacd6cf5807b1e50d9fe5fc4632daaad448a73178a50eeb1b14689c7832f77c8188aefc8d67e08750c7680c4f849434e5b3327982204d18d604882bb49f6924bf3008190f81788df25be8d9262a87d8626b7a2bda82fcb7b0132382d517c29c03893f74b38f1f0bdc06da3752c35d77bba1e57b1524398bb38bd097688ac8db5af555588d145f2e39783a5d0883ff4a5000699ee0bb72a817ff8d92e93263edccb620b4b151c45d99e42488c36063148ff8f6c0f5f205336960ee487d5a824200612bb2c8f03e30c48ace2ff41a9a8dfe22cf79d30841e350cd038f221c54dafafe88579c812c6c09ec4683763f6a1f3eb59d3d1857491001adb0c2d60dada16b39fab752cdc3b2980a90e9af2e315ac11c5b580e83018f1a8db8cd8d2c05a6daa5691440c00e13ab0c63e5fbfb591fd30d9c2e34601703e59cb3565c66477ca450668a543a78859bf84b01b5a20d8dd3cec3d2c11fdf6bed63b10666456a7d00813e6591b91ab741cc5137efadbe42416081b3cefc0040305e4c02c55271f1c53bcd0d9da1c0f313c5ef980cbaa5509ec4fc8297054b5b3df5429b15d567587b5284150787b4f816dc64091a32fe6903ad10fa3feb24c30e6677e76d68710566dcbdf871b41acb1962f24f4f1a48c09bcc0675bdafa47c86692d1e4ab96b01e2ddf0e7414931a048ef64203cf54606ba86acb98d3d1be4f61099d97a10ff0f414c630934057c1ee6e7a615e7bbd95cd3f44b226ab4ee43520420bbf6f96efa0de1e25d4ff9bf342aeb42b2b2f9748b8fbc386eb2d7fe47d502947350d14a284d4690471cd59194da8844bf57d9fa56e4ce6fd5fdab8fbc531bddc46bdd11993aaa9e2bda82f4ed0bd360073930f03eb5a7c2a70a90a435cbba58d97ae71a3fdaf06d1f2bbf835107a85a9b97699767a4f7a55f2ddacaa6f7abf1a43765df6480a6ee0c141f934db726de68b59dbdd9b3f58e6ea7f43f651b3a6f3910ecdf01e23311c4895ef6f0d9e89ddabacad02ca75c57d32cbb3fde46ea0a5ada07e5a3c5e124839a0ccdddf4b0c6359239f3cb125c7cd192c3e149afd6725d6290d312bceb3b5e1b419aa5c92a995d39ed358f08380d690b3948d58fc53013707a0dd9be0fb7041298e5b2ce202414c691876d2ccd6bb56581ed00013e7a74df07d47f7a1803c4ffef3408242b861ab2cae088ddda83a8ae65e593428b4b1accf57b6580df75b2a3b16e27b6e4058cf2ad27d2a585f29caeec021f6ab490fd234ee7cae42ecc036718a44f323fa054c4c406fd4d671e918f32b378fdcafea701eed63bb80b720999a66066af42adb75644f3a3335479bf1bf38b80b1782d34be200abe6ae25b1017c2ab81217c624ed6df2f207273f6e0c0999f274f25fb633d3cbc95587459e574edae4394368207058f587468c273bb98e5680bd3375bdc1b09827f1da661746947cbf82603df8c905109e6bfcdd57b493014a91c411206b5aaf29c6bc6208f1d15f4524872147f2db94a99a5c47564b3b7157c1bfb3e7ede31a36a4b1da4bcfe973235ef655ea76a151e8ef626d181020bc43a18cdf5002bb1ca21c530e3b7be1a84cc7af8a132d696525f59cbf1e0679204b02be79ffc76619735c497e342965e103d0abd7753e6a7ca77771c9d7eeb65508941d6a2f1361efc4443edbe3b7710d79df1327a5670fc35bafa17e16fa52962b3727d17198467de2e4dc180443210d08754118f6665ae6eb0562d9955b0cbf8673b8a45ed35f10f0a10df83229053faa6cfa9b182ccc494619d0dd387c04f94a5ef85eab97ce4e3e92b56ce87db2c232f22a1a01169c8e346649c050968a8bce732853cf0696f62fc29d1926eca3030ee91ba1bccc195c799f8b3994d3a5cf44b4c42dcee77135d108aca481f7171950a3cd230d0a8d20cc5c6c7ef4770efe0d20c61b2b1484d27db6a3174ecc29cb19d64b22b2efd6130d269d299eef0f6e00491bb1c11bcd470105f10d014795d44c2d0500c569dfdceb3f3204d48d4836e116b7522466bcb17448f7ae18d6e1f7d84a4d7e165bc1697ca2ec7865c916ca42a294c4d475bfc51b69a7fda9521134119a777fa09b6bc3a83b4406e2f3044204b4bf50eb2a54d7952ef1231007e650b3aa6dbef0aa13cee5c713f71026553cce861ce40c361a2f05c7d1f076d3e30a633e89d4d30fe7098174d9505ea7b56acd4a74fd66e3174874e38bfbc2ccc1429ee53a4d413cf988fd56020b262f8696770048d1d49097e3b201e52a91e3ad8908881ce59e26ddf97c5d30e85e104d98d684188be4bda3b411a6c283c589f4ce816d5dbee53124223d7a94fbcce2cd745cdde76c8d0d9effd9c988a51b704f5492876b62a49daf77e15d4d47583cb9ed960ce1eceda98416819c1a7dd4be006b94d86ca1c8c5b7a4a1d7b610be3893259964299d81d1786485cfb028f446726392f12ca7f23ddae4bbb729c50323725c37d013774706b4de20f1ba782f48d40812af8b348f55a7fc4e06f7c911c75deee5d1159dd1519ad81223a2f7ae8134ce1ce2aec24c1cf975dfa645e7ebc9690e418a10fa6c198cc9ee5d8cde947fb5bee00f626a63c0ca034dd7bd2156ce8c48b657899820a04de9290a4e35352b6f3003729c60fea0d9defd82de1da795dcf8e801e6c77d6c751c8b32ca186511d2808a009f19a1804cd81a5b66131a4f14c241a9c12dc57b2753e5da93bae86fe5dc5d777fa438a769189f65021d79c03f940857b53a4a15d380808e02ce3e70550a90642feef77ac95072ed1b0ff5e3bd0d8b5af497b54d98345b44ef05dce804acfbe586dc8c57e4868b23f94f1704b472adada2eec2bf84dce9adc52a0d99f7bf8a3dd0d9e126e3a01e52f68e05777eb61fc902b09a4b071c4546b40f9ff3bf3538334f2bf993ba167bff9c07c1c44b7671b0a782370be215de86a3ef3afcfd7ba8b90ab095d8dd340532646fd199c1b972a0604d95b8975f313fface283c1f3ff224157943346f33b13d025e5b8a683db61f56a99718d0dea5ce7355f18a9f3f3772d5b9d66475f790658228c01b7ba0cafffd05fdb9c8c1bba65728dfdb91b2a77cf70269bf0325a9e7e6baea6e055ddda5495434d08b1b19848f9301274a481c253c5361280e50deb07660de8c082b8ea9ef13ac9a2fdbf63571e098e9b13e7be819d9c9d970d5aeef40bbe7aa5c608ae35114e92a57be4f13c814c0675847fa1810468b7236663937f41d66c6868ecc6b2abd82653d653d39d0ca4d06e2138e8b6acb7652f0a8f3fb5673483319589a62d0d1fc72f840e62b27904d3328de679d5899bf12f09ecd074ca712ad59354bbc3151b74ab6fd25bfab93b8a6a1d469fed5efa23cb4e66628090c95852a041007c1e6cbdd0d81565334b0e08f59842065e2a3c5918daf85ebb55f1e5a99e1ca476c42d3632e64551d4317a775da5cb02c6a61c6c7bc169879c7adf66b23470a301418a3b7a92d2ff81c1be6599f09cf790647f50eae889ef8a23629de1f334a02ecb9c0d6449a82a8c8dc71b10d932c2ec39094f8724a365d488b2facabf3e83c16df54f02d55b042aa282acd86bad80a8789bc5343f723523141d500fb619faf535b5b5ff2b7f43c05338ebcd017f2fb5a21384bb6af525848c5ae0a136d6e822320180e864bede200335b4cdf143d213f5d29e1f88363df7b3f9402a5d58b0a8b1b5944eeda4b923259400a6de3721b9512789aead5501c4eb10b375cc09e6caf703ba959f92d1b37a9ff54bb63376032bb7a86f38881f25af5752b06ca34c7e719aea7a66c3629daf05b1cd5429bd5f7021ab1983396b98d15b0692f4dfd107aff195e27ed569347f0ea15ab156c1faa574c12ea5a6a315678a64e97562926239e60c5ec5456114d93c1c81e56a520bcc31e36cdd5ff05d088f8ed52d7922933c0495db92ef08e862767c15f5370df3f7f9e5815d73d96fc9596302b635f215ebb5a476f5c7bb3e632691f491786db02b4836aafd1676a9ce4bf96e85fc0e10f06bb6727ade4c439e1af5f498f56885becfa88e4343b2d9de8deb8ad6af88f352888819f48972cf43ba7ed4aa0ee9b51178d90aa27113fb09920c798394f9cd91878b5ff270e20e69bb7ee4aeb4c093725c22c524cf5848e80dc18ad55c608322e2e72c6d9b4a983a8289d0a6e688c61a72b9f45737482d0ec9db55220fecc26ae4cd1afbef3414c45bc523e994bd2001c3cce448d155f9fdd76151abb1d2d0676355a9441ad9fe2360800d2b7bb0bc9e82fed75723f0c706ced5aaae89d12638f264c9a22f3431d78fed24a0204fc8bfa88067452a7b83c7d938a096a8484f7e237478545cf5ab2e3ee363afbdd666953c908d00d541eea0f118852941a7395c28bc804327930460e96cd29148d8372a3ff2eb15e0b2c50698d5b5331cc6c67b0dd27dd9576e555c8b5657285747f19f27ccb78c39ac86eca3ca24fe94f41f6ad7680479f6417723e55f1de8a34a9be11642f65528057e694a6cb5cb96d6f294f3449773f2ef5b8eaccbc2deb7705665b0f27f52ab92fe918abce739578f4a7baec1a7a9006a6dc11f70a99c53b94df9f4937a7ffda41f2587c1912dc05fb433cc695c872a84d099e323279521c4fe980fc", 0x1000}, {&(0x7f0000000180)="33089458620ecb077fa2247890d65aab9b19fccc89", 0x15}], 0x3, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0xdee4, 0x800e, 0xffffff80, 0x8, r7}}, @init={0x18, 0x84, 0x0, {0x5, 0x12, 0x4, 0x7f}}], 0x38, 0x2000c000}, 0x8010) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[]}}, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r2, r8], 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 576.992671][ T8965] binder: BINDER_SET_CONTEXT_MGR already set [ 577.026774][ T8965] binder: 8962:8965 ioctl 40046207 0 returned -16 09:15:13 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80002010}) 09:15:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0506617, &(0x7f0000000380)) 09:15:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40247007, &(0x7f0000000380)) [ 577.157028][ T8972] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x8000000}) [ 577.214127][ T8972] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xb000000}) [ 577.421706][ T8988] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 577.460138][ T8988] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 577.485442][ T8950] binder: BINDER_SET_CONTEXT_MGR already set [ 577.494000][ T8950] binder: 8944:8950 ioctl 40046207 0 returned -16 09:15:13 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@handle={0x73682a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0xb, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)=0x10000) 09:15:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:15:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x17000000}) 09:15:13 executing program 2: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 577.656251][ T8988] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3b000000}) 09:15:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x2}) [ 577.698864][ T8988] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 577.706140][ T9010] binder: 9003:9010 ioctl 40045612 20000040 returned -22 09:15:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x3}) 09:15:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) 09:15:14 executing program 2: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xf4) socket$vsock_stream(0x28, 0x1, 0x0) r0 = io_uring_setup(0x65, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x111400, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) pidfd_send_signal(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x20000038, 0x1, 0xfffffffe}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x911, 0x8}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000e100000000001c0012800900ecff626f6e64000000000c00028008001400ffffffff"], 0x3c}}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000007c0)=0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000740)=0xc) setfsuid(r7) r8 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd7b, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, r9}}}, 0x78) sendmsg$unix(r1, &(0x7f0000000880)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)="d9dee5dd2ba9e4138325d55fac513b87f462acbf6320d4fecada2e994de5035edf206848a91765c649323ddd4045edbf7072532a13539bf65ae513888128c487df6405bd4ccad040b86a2555eae43a456dea3f0f7e7eee1b9fc9baf51ebbf3376d2266ca531088046f03308dd5a0bea082fa971b0d3e23722d0cc528aec8a5b5e110a129f4252ef240862a08e925", 0x8e}, {&(0x7f0000000300)="18834720f460c496932bad29fd5df21bcd52515c62748cc0cb99a818efdfc21ce9660bfd3a6e0a4d90968aece65fa5a0c37d6f7dc4edab3e49684ef8c9eb1005ddc1bf5b18b66fdd93a053efe261224c5c6b8e3ba747ee9c440f874888f1fa69be905440ffbb0a548e7acb7179262bef7ffcc77b9efe155d0c3aa2b8e7f35144c308748d43f988a6ad1636c4fa980f28a57e97e0d77f50df0820246b1ed63975eb65a8342c50", 0xa6}, {&(0x7f00000003c0)="0af4061885653559b8db85f568f2d905b10eac51aeb3449ef4086edc068b3a753131983fa9becfe2e8f7c1953a50cff41dce70eead7ed3c9db12e231c07945c5bd1741a77beb9403e41f6350a62439e12e23c76eb3f5d0e11c8b3d2167", 0x5d}, {&(0x7f0000000440)="aec581b7bba7020194a577baab1dba2d120506d6431245ae5ebdfc68a88f5652166f7c713ebc3c1914faffb2c5a4c6e9123bd009c34bce3d92d464aa70068da463d975e051b68f9a4c11d1f3a93de24e3c528b754dbf50cf333df167fa576144cecbba013552835e302dd74137aec954d9f03dd1e3c631283efbd3402258479e87499b4a1a8fd2514ebb19df771e16c00457d79dcca8a9fa283cc8521736d625fef0924a2581fd971ad15880cca6066a078a60548115e28601ca36ad87998f47c522af26e088912a7c1fb252f08ab010d4de82d4c79d207c", 0xd8}, {&(0x7f0000000540)="9693052bfd8d6ab4734c8d9f3c12842a47f709ac82a3fe5d", 0x18}, {&(0x7f0000000580)="5ee82ef873ff47010a4c6ab04c8bf59259d69f68560e622021162e99aabbfc29914210132465d54be7742231c1fa0eb034ac78b2cd856c179287e0eb0f3b12c1b7d33422392225f3b18c12c00476bea55c706686f9929cb08cb8ad4cff295cf8cf12e26c0531b840d00dfc664fe867698ca321909f66f4bb22faece6ba99c3523be96a2d67454c853e60dec6d69c778389af98bbc0c0eb61a1afed8012875b1f6c9411aad3cf4f54b1b714f43938bf1804158864e40f40b37be5ac467983458f3f8eec5bd1148a203480357804867f7095de4d7d6935c2e5a5caea7d0aa378254b9a9f0963abdb9637c647", 0xeb}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}], 0x58, 0x40800}, 0x80) 09:15:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, 0x12, 0x622, 0x70bd25, 0x25dfdbfb, {0x27, 0x7f, 0x3, 0x5, {0x4e20, 0x4e20, [0xff, 0x3, 0x8, 0x400], [0x6, 0xeb, 0x29ca, 0x895], r2, [0x4]}, 0x468b645b}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "696b2506ae698c7b"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "e53d534e38b959343bbba3c415c1bed50b73febdcbb192f08c2f00cc4b93cadfbf26ee272a2f0335f16f537eb8c2d09aa13713455a6c56c760175dd84883b9c0f150793234028101d0ec6f8afb7867e79e8e804051f9af158fdc067c3d92947881fa8e6d7bb779123eef8d700889e14ca81a1bc20201c63e571beb2abb81968ed0609a572637af0ce42aec3d35ede96c215617a6687f47bf9b1021d09ccd3a826a9b3288256bd98d1e2448a9f59f92b64d94ccace691afa5beb59abe37717b156e376081a5cb72e1fb9142f4"}]}, 0x128}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = dup(r4) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000000)={0x8}) 09:15:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x3f000000}) 09:15:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x4}) [ 578.184001][ T9040] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 578.233260][ T9040] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 578.282837][ T9049] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 578.282847][ T9049] binder_alloc: 9038: binder_alloc_buf, no vma [ 578.324802][ T9049] binder: 9038:9049 ioctl b701 0 returned -22 09:15:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x5}) [ 578.435996][ T9010] binder_alloc: 9003: binder_alloc_buf, no vma 09:15:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xff000000}) 09:15:14 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x76d0, 0x7, 0x4, 0x400000, 0x7f, {r2, r3/1000+10000}, {0x3, 0x0, 0x7f, 0x6, 0x8, 0xe7, "168f61a5"}, 0x6, 0x2, @offset=0x6, 0x8, 0x0, r4}) bind$isdn(r5, &(0x7f0000000340)={0x22, 0x7f, 0x0, 0x0, 0x7}, 0x6) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r6, 0x7001, 0x0) 09:15:14 executing program 2: r0 = io_uring_setup(0x65, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') [ 578.532954][ T9040] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x6}) [ 578.574639][ T9040] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xffffff7f}) 09:15:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 578.675959][ T9065] binder_alloc: 9058: binder_alloc_buf, no vma [ 578.703575][ T9065] binder: 9058:9065 ioctl 7001 0 returned -22 09:15:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3f, 0x9082) 09:15:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x7}) 09:15:15 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x1, 0xd, 0x1, 0x81, @tick=0x7fff, {0x1, 0x2}, {0x3, 0x3f}, @result={0xfffffff9, 0x18000000}}, {0x24, 0xf3, 0x4, 0x3, @tick=0x6, {0x0, 0x5}, {0x7, 0x4}, @connect={{0x9, 0x8}, {0x1, 0x8}}}, {0x9, 0x20, 0x0, 0x1, @tick=0x4d50aa88, {0x6, 0x20}, {0x1, 0x5}, @queue={0x72, {0x1, 0xfffffffc}}}], 0x54) 09:15:15 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x5, 0x25, 0x17}) 09:15:15 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) epoll_wait(r3, &(0x7f0000000000), 0x0, 0x5) 09:15:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x2}) [ 578.999602][ T9049] binder_alloc: 9038: binder_alloc_buf, no vma [ 579.006439][ T9083] binder: 9038:9083 ioctl b701 0 returned -22 09:15:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x307400, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x6c84}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)) 09:15:15 executing program 2: io_uring_setup(0x469, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x56}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\vs\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x1, 0x4}, {0xa, 0x1}, 0xc85, 0x2, 0x5}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x4c00, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x30, r3, 0x10000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a6273000000000000000010000000000000852a627700000000fffffe00007700"/58], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x7, 0x6, 0x4, 0x0, 0x80000000, {0x0, 0x2710}, {0x1, 0x8, 0x9, 0x38, 0x3f, 0x8, "838ed240"}, 0x6, 0x1, @planes=&(0x7f0000000240)={0x9, 0x400, @mem_offset=0x6, 0x7}, 0x8001}) 09:15:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x9b0000, 0x3, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98091a, 0x3, [], @p_u32=&(0x7f0000000140)=0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1404, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x1d, 0x0, 0x0, 0x8}) [ 579.192334][ T9105] binder_alloc: 9087: binder_alloc_buf, no vma 09:15:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3}) 09:15:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x8}) [ 579.308868][ T9110] binder: BINDER_SET_CONTEXT_MGR already set [ 579.315524][ T9110] binder: 9106:9110 ioctl 40046207 0 returned -16 [ 579.348544][ T9122] binder_alloc: 9107: binder_alloc_buf, no vma [ 579.356313][ T9121] binder: BINDER_SET_CONTEXT_MGR already set [ 579.362769][ T9120] binder: BINDER_SET_CONTEXT_MGR already set [ 579.366124][ T9122] binder: 9107:9122 ioctl c0205648 200001c0 returned -22 [ 579.390991][ T9122] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 579.394023][ T9120] binder: 9106:9120 ioctl 40046207 0 returned -16 [ 579.406112][ T9121] binder: 9109:9121 ioctl 40046207 0 returned -16 [ 579.445923][ T9122] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x300}) [ 579.470015][ T9121] binder: BINDER_SET_CONTEXT_MGR already set [ 579.504191][ T9121] binder: 9109:9121 ioctl 40046207 0 returned -16 09:15:15 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x4}) 09:15:15 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/133, 0x85}], 0x5) 09:15:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x500}) [ 579.708755][ T9142] binder: BINDER_SET_CONTEXT_MGR already set [ 579.730084][ T9142] binder: 9139:9142 ioctl 40046207 0 returned -16 [ 579.741127][ T9143] binder: BINDER_SET_CONTEXT_MGR already set [ 579.750943][ T9143] binder: 9138:9143 ioctl 40046207 0 returned -16 [ 579.771234][ T9147] binder: BINDER_SET_CONTEXT_MGR already set [ 579.800031][ T9147] binder: 9139:9147 ioctl 40046207 0 returned -16 [ 579.819379][ T9142] binder: BINDER_SET_CONTEXT_MGR already set [ 579.830925][ T9142] binder: 9139:9142 ioctl 40046207 0 returned -16 [ 579.853986][ T9151] binder: BINDER_SET_CONTEXT_MGR already set [ 579.876304][ T9151] binder: 9138:9151 ioctl 40046207 0 returned -16 [ 579.925418][ T9154] binder_alloc: 9087: binder_alloc_buf, no vma 09:15:16 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f0000000080)=""/84, &(0x7f0000000000)=0x54) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x5}) 09:15:16 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fgetxattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=""/155, 0x9b) 09:15:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x600}) [ 580.140349][ T9129] binder_alloc: 9107: binder_alloc_buf, no vma [ 580.151123][ T9111] binder: 9107:9111 unknown command 9963802 [ 580.157271][ T9111] binder: 9107:9111 ioctl c0306201 20000540 returned -22 [ 580.169274][ T9129] binder: 9107:9129 ioctl c0205648 200001c0 returned -22 09:15:16 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x141800) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04634440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x400000, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x29, 0x27, 0x0, 0x1000008, 0xfffffffc, 0x3f, 0x0, 0xc4}) 09:15:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x700}) [ 580.189752][ T9165] binder_alloc: 9160: binder_alloc_buf, no vma 09:15:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x6}) 09:15:16 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1412, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x321040, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capi20\x00', 0x141000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000240)={0x6, 0x7, 0x80, @random="b85cc5da545b", 'erspan0\x00'}) keyctl$invalidate(0x15, r2) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)='\x00') ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0xf, 0x12, 0x0, 0x0, 0x4}) 09:15:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0xff00}) 09:15:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x7}) [ 580.334420][ T9173] binder: 9171:9173 unknown command 1078223620 [ 580.363099][ T9173] binder: 9171:9173 ioctl c0306201 20000200 returned -22 [ 580.413908][ T9177] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 580.428331][ T9173] binder: BINDER_SET_CONTEXT_MGR already set [ 580.441059][ T9173] binder: 9171:9173 ioctl 40046207 0 returned -16 [ 580.453019][ T9177] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 580.508813][ T9143] binder: BINDER_SET_CONTEXT_MGR already set [ 580.515523][ T9176] binder: 9171:9176 ioctl 4142 0 returned -22 [ 580.530750][ T9143] binder: 9138:9143 ioctl 40046207 0 returned -16 [ 580.543664][ T9186] binder: BINDER_SET_CONTEXT_MGR already set [ 580.549668][ T9186] binder: 9138:9186 ioctl 40046207 0 returned -16 09:15:16 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x9, 0x0, [{0x0, 0x4, 0x9, 0x0, 0x69}, {0x80000007, 0x6, 0x1000, 0x3, 0x200}, {0x80000000, 0x7, 0x6c0, 0x1, 0x1}, {0x4, 0x8000, 0x4, 0x7a9, 0x8000}, {0xc0000001, 0x80000001, 0x80000000, 0x5836, 0x7}, {0x0, 0x8, 0x5, 0xffff}, {0x2, 0x6, 0x6, 0x9df, 0x7f}, {0x80000008, 0x0, 0x7ff, 0x43, 0xf7}, {0x80000000, 0xffff22ff, 0x4, 0xe, 0x4}]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x100}, @fda={0x66646185, 0x7, 0x2, 0x34}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000000)=0x1000, 0x4) 09:15:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x8}) [ 580.637193][ T9177] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 580.658435][ T9177] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 580.736605][ T9193] binder: BINDER_SET_CONTEXT_MGR already set [ 580.745785][ T9193] binder: 9191:9193 ioctl 40046207 0 returned -16 [ 580.833257][ T9199] binder: BINDER_SET_CONTEXT_MGR already set [ 580.863143][ T9199] binder: 9191:9199 ioctl 40046207 0 returned -16 [ 580.957174][ T9202] binder_alloc: 9160: binder_alloc_buf, no vma 09:15:17 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000002c0)='./file0\x00', 0x1, 0x700) r4 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b630000c086308698c398c153ce0a0a25cbc95ecabd7e44f0a04e27c2e8fc064a1754"], 0x1, 0x0, &(0x7f0000000140)="0e"}) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000080)={0x140, 0x384, 0x80, 0xa0, 0x6, 0xe70, 0x10, 0x1, {0x1ff, 0xffffffff, 0x1}, {0xe31}, {0x6, 0x401, 0x1}, {0x7f, 0x4, 0x1}, 0x0, 0x100, 0x10001, 0x4, 0x0, 0x1, 0x3, 0xfffffffb, 0x7, 0x0, 0x8, 0x8, 0xa, 0x2, 0x0, 0x7}) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:17 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x1000000}) 09:15:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xb}) 09:15:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000000)={0x34, 0x35, 0xffffffff, 0x0, 0x1, 0x5, 0x1}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0xa30000, 0x6, 0x3, r4, 0x0, &(0x7f0000000080)={0x990af6, 0x7, [], @value64=0x3b6}}) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x12, 0x20, 0xe, 0x6, 0x8, 0x1, 0x1, 0xd7}}) [ 581.108451][ T9211] binder: BINDER_SET_CONTEXT_MGR already set [ 581.125844][ T9173] binder: 9171:9173 unknown command 1078223620 [ 581.147967][ T9173] binder: 9171:9173 ioctl c0306201 20000200 returned -22 [ 581.164130][ T9211] binder: 9206:9211 ioctl 40046207 0 returned -16 [ 581.164698][ T9214] binder: 9207:9214 ioctl 4606 20000080 returned -22 [ 581.172335][ T9176] binder: BINDER_SET_CONTEXT_MGR already set [ 581.186698][ T9215] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 581.199185][ T9217] binder: 9171:9217 ioctl 4142 0 returned -22 [ 581.209009][ T9176] binder: 9171:9176 ioctl 40046207 0 returned -16 [ 581.224030][ T9215] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:17 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x2000000}) 09:15:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x17}) 09:15:17 executing program 4: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20a40, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xaa}) socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x600000, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7576c8"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000002c0)=[{{0x3, 0x1, 0x0, 0x1}, {0x4, 0x1}}, {{0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x18) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) openat(r4, &(0x7f0000000080)='./file0\x00', 0x0, 0x121) 09:15:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3b}) 09:15:17 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x3000000}) [ 581.414867][ T9211] binder: BINDER_SET_CONTEXT_MGR already set [ 581.424922][ T9211] binder: 9206:9211 ioctl 40046207 0 returned -16 [ 581.436413][ T9227] binder: BINDER_SET_CONTEXT_MGR already set [ 581.438559][ T9224] binder: 9221:9224 unknown command 13137525 [ 581.452334][ T9227] binder: 9206:9227 ioctl 40046207 0 returned -16 [ 581.476189][ T9224] binder: 9221:9224 ioctl c0306201 200000c0 returned -22 [ 581.486568][ T9211] binder: 9206:9211 ioctl c0205649 200000c0 returned -22 09:15:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) recvfrom$x25(r3, &(0x7f0000000080)=""/219, 0xdb, 0x40000040, &(0x7f0000000180)={0x9, @remote={[], 0x0}}, 0x12) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') [ 581.533502][ T9199] binder: BINDER_SET_CONTEXT_MGR already set [ 581.539608][ T9199] binder: 9191:9199 ioctl 40046207 0 returned -16 [ 581.609811][ T9193] binder: BINDER_SET_CONTEXT_MGR already set [ 581.631973][ T9193] binder: 9191:9193 ioctl 40046207 0 returned -16 [ 581.645032][ T9239] binder: BINDER_SET_CONTEXT_MGR already set 09:15:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) flock(r0, 0x8) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xc, &(0x7f0000000080)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)={r5, 0x8, 0x19, "aef4c0c80cb165270e099289502680e48272c52941ec83c63c"}, 0x21) r6 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x3, 0x0, 0x4000) 09:15:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x300}) [ 581.687139][ T9239] binder: 9237:9239 ioctl 40046207 0 returned -16 [ 581.812444][ T9247] binder: BINDER_SET_CONTEXT_MGR already set [ 581.840743][ T9247] binder: 9244:9247 ioctl 40046207 0 returned -16 09:15:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x4000000}) 09:15:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/61}) 09:15:18 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x5, 0x0, 0x1c, 0x0, 0x0, 0x5, 0x2e6, 0x1}) 09:15:18 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x500}) [ 581.890043][ T9209] binder: 9207:9209 ioctl 4606 20000080 returned -22 [ 581.911148][ T9248] binder: BINDER_SET_CONTEXT_MGR already set [ 581.917267][ T9248] binder: 9244:9248 ioctl 40046207 0 returned -16 09:15:18 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b6300009542451decb443494c390381009bc63a291f9af6e2192c3b4e0c0a3c5c852572e3ca7287d16635a859a83321b2e4f2d09f374194160a2ec5db895fae3603d37a43d8a487d7995312cb05521654b2ad08c283dd3d24269e47f68a155983d5adb6fdf7392c95e33a3bc65d7fdcb8514de0ca05c13cd406c473ba3570147accfd36b60fd13ea65561b0f3ef73f6749cd642d19b6542f22a857139e86d931ea56ef02f823c9a1c4a9a6b82f573d37975918092fec0646825bb3d07cdd4ef335a2213dcc0b797a683812db101a82e9226e9a2467a4e29bd1e3bf2858dc9e62a00000000"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x80, 0x3f}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000080)={0x7fffffff, "2a3bb546a102d0046d4a7bd04c11748a6df8f6958db7d796b6a2d92baa9617d4", 0x1, 0x1}) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 582.024154][ T9258] binder: BINDER_SET_CONTEXT_MGR already set [ 582.044855][ T9258] binder: 9252:9258 ioctl 40046207 0 returned -16 09:15:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x5000000}) 09:15:18 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x600}) [ 582.083472][ T9264] binder: BINDER_SET_CONTEXT_MGR already set [ 582.107902][ T9264] binder: 9252:9264 ioctl 40046207 0 returned -16 09:15:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x18, 0x1, 0x0, 0x1d}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x80000000}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1cd800, 0x2}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x0) ioctl$KDENABIO(r1, 0x4b36) [ 582.143049][ T9258] binder: BINDER_SET_CONTEXT_MGR already set [ 582.149769][ T9258] binder: 9252:9258 ioctl 40046207 0 returned -16 [ 582.166605][ T9268] binder: 9262:9268 unknown command 458752 [ 582.177053][ T9269] binder: 9252:9269 ioctl 40247007 20000380 returned -22 [ 582.196219][ T9268] binder: 9262:9268 ioctl c0306201 20000280 returned -22 [ 582.219823][ T9273] binder: 9262:9273 ioctl c0105303 20000000 returned -22 09:15:18 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x700}) 09:15:18 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000080)={0x2, 0x1, [0x0, 0x0, 0x7, 0x3e, 0x0, 0x7f, 0xe11, 0x6]}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x16}) [ 582.378036][ T9280] QAT: Invalid ioctl [ 582.401269][ T9282] QAT: Invalid ioctl [ 582.602465][ T9248] binder: BINDER_SET_CONTEXT_MGR already set [ 582.629288][ T9248] binder: 9244:9248 ioctl 40046207 0 returned -16 [ 582.629293][ T9247] binder: BINDER_SET_CONTEXT_MGR already set [ 582.629334][ T9247] binder: 9244:9247 ioctl 40046207 0 returned -16 09:15:18 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flock(r1, 0xc) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x6000000}) 09:15:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x5, 0x0, &(0x7f0000000240)="78b45d8a2e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000080)="5bb383982b26d5f144343a3b94022e6c7e2b1651118603e2b66cbd6240a02eeb4062cd42eb4c60e62401cf5ad3cd26355bed88c456fa87330af9a42f35ae96945ae08855f911217318a51c0284d5a36ec0a08e", &(0x7f0000000100)=""/194, 0x4}, 0x20) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe000000852a627700"/62], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) recvfrom$inet6(r2, &(0x7f0000000080)=""/193, 0xc1, 0x40, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40247007, &(0x7f0000000380)) 09:15:18 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xb00}) [ 582.753949][ T9294] binder: BINDER_SET_CONTEXT_MGR already set [ 582.777806][ T9294] binder: 9289:9294 ioctl 40046207 0 returned -16 09:15:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x7000000}) [ 582.811805][ T9294] binder: BINDER_SET_CONTEXT_MGR already set [ 582.826848][ T9294] binder: 9289:9294 ioctl 40046207 0 returned -16 [ 582.934510][ T9273] binder: 9262:9273 unknown command 458752 [ 582.943334][ T9273] binder: 9262:9273 ioctl c0306201 20000280 returned -22 [ 582.968763][ T9273] binder: 9262:9273 ioctl c0105303 20000000 returned -22 09:15:19 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x208d41, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000340)=0x7fff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="88d70935bdc23b351439b66905a9f53378a1ac156e3110a19191324c559b4295"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x63, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="78b9ab3ba590e1b3007a38400173a9024d0c4e687eff0436154b7a803bee573e8515f7417b3f3fea02f68d085fbdcfe95bb8678aea1f0cf4d1cc5f7955ad7973f27266fa376122f8d910efe57bedca151fbbf2bb5ab18c94ecc19d5f939f0dfbc34619"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@binder={0x73622a85, 0x10a, 0x1}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x763) 09:15:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x1700}) 09:15:19 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000a07fad2d01d990664d43efe1279433dc0f5ecbe05e67737b78ed5de8e9a002e0ad4af9e3c5058b1fa1dc9a1471e604522d0524e9d7ebdffdcf4820a14931a6c32411d91d2b3933d1fb8fd43ed244411c858b587aa395d3a3af3dee7ae3cbba247edd0d322954945bfe468284bb0933f4d18afaf70d582ab0d822c2a0f6375cfa0efe4b44ace2706e89ac6c4b4fd24e7a19b3200a35", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) accept$inet6(r3, &(0x7f0000000000), &(0x7f0000000080)=0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @xdp={0x2c, 0x0, r5, 0x24}, @can={0x1d, 0x0}, @l2={0x1f, 0x1, @any, 0x7fff, 0xf28defc15a7792e4}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='wg2\x00', 0x1000, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000340)={@loopback, r7}, 0x14) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:19 executing program 2: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80800) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = io_uring_setup(0x100065, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x145}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044053d9a5495425f40bf06aab58f84f6ecea3d7c79f68b635438fc824359d66a647a3ef8a3b417c00b94c72c4a6fee4f369d7dd2dbc061405bd5bdc206ea5dfd255ad0040a60c0cf5517466071cc06d78e11f84b4025c9661f63d6137272b1e45f53a00f5052927630215d42bd2e9f9376a0cff5c959f85abb3"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000340)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="8c"}) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x0, 0x1000) msgsnd(r5, &(0x7f0000000000)={0x2}, 0x8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x20000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000817529a000000000000900000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6eaead64000000000c00028072d437921a08", @ANYBLOB="54cd0f31a261a1789068b9ab4974aea66c9267024a8b745751f0b48489e90a128149d14b084744f291052e972ae33f4d8f7cbe2acdfe5965c048fa5472fdd4eef790250ab1db99675437069d54d2f714d73fbbd8a0bea5551802c8576e2b1dce"], 0x4}}, 0x0) r7 = fcntl$dupfd(r6, 0x0, r1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x3, 0xfffffffa, 0x6, 0x9, 0x7, 0x2, 0x2}) getuid() 09:15:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x8000000}) 09:15:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3b00}) [ 583.119981][ T9325] binder: BINDER_SET_CONTEXT_MGR already set [ 583.142763][ T9325] binder: 9317:9325 ioctl 40046207 0 returned -16 09:15:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0xfdfdffff}) [ 583.181856][ T9330] binder: 9324:9330 unknown command 889837448 [ 583.200711][ T9330] binder: 9324:9330 ioctl c0306201 20000200 returned -22 [ 583.220823][ T9328] binder: BINDER_SET_CONTEXT_MGR already set [ 583.227743][ T9328] binder: 9316:9328 ioctl 40046207 0 returned -16 [ 583.236149][ T9333] binder: BINDER_SET_CONTEXT_MGR already set [ 583.255789][ T9328] binder: 9316:9328 ioctl c01c64ae 20000000 returned -22 [ 583.272863][ T9333] binder: 9324:9333 ioctl 40046207 0 returned -16 09:15:19 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400800, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x80003}) [ 583.284264][ T9330] binder: 9324:9330 unknown command 1001109880 [ 583.296559][ T9330] binder: 9324:9330 ioctl c0306201 20000280 returned -22 [ 583.317015][ T9330] binder: 9324:9330 ioctl c004562f 20000000 returned -22 [ 583.346811][ T9333] binder: 9324:9333 unknown command 889837448 [ 583.354515][ T9338] binder: BINDER_SET_CONTEXT_MGR already set [ 583.369575][ T9333] binder: 9324:9333 ioctl c0306201 20000200 returned -22 [ 583.384181][ T9338] binder: 9324:9338 ioctl 40046207 0 returned -16 [ 583.417210][ T9330] binder: 9324:9330 unknown command 1001109880 [ 583.427250][ T9330] binder: 9324:9330 ioctl c0306201 20000280 returned -22 [ 583.558505][ T9300] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 583.558514][ T9300] binder_alloc: 9292: binder_alloc_buf, no vma 09:15:19 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0xfffffffc, 0xffffffff, 0x1e, 0x0, 0x0, 0x5}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) unshare(0x40010100) 09:15:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0xff000000}) 09:15:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3f00}) 09:15:19 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x9, 0x1, 0xa}, @flat=@binder={0x73622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0x40}], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='U'], 0x1, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/255}, 0x107, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = socket$kcm(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x20000000}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:19 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10dc81, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b6300b290bdf754b6c75e6be5965c99f8c86c5c683df2b7b49433e7d3ee6204df07ddbee10f8080"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="110000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00i\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000880) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'bridge0\x00', 0x1}, 0x18) [ 583.716842][ T9354] binder: 9348:9354 unknown command -1308597493 [ 583.730534][ T9355] binder: BINDER_SET_CONTEXT_MGR already set [ 583.740673][ T9354] binder: 9348:9354 ioctl c0306201 200000c0 returned -22 [ 583.760101][ T9355] binder: 9351:9355 ioctl 40046207 0 returned -16 09:15:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xff00}) 09:15:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0xfffffdfd}) [ 583.781524][ T9354] binder_alloc: 9348: binder_alloc_buf, no vma [ 583.858277][ T9354] binder: 9348:9354 ioctl c0306201 200000c0 returned -14 [ 583.865772][ T9361] binder: BINDER_SET_CONTEXT_MGR already set [ 583.874100][ T9361] binder: 9351:9361 ioctl 40046207 0 returned -16 [ 583.884463][ T9360] binder_alloc: 9348: binder_alloc_buf, no vma 09:15:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="bf404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r6}) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) [ 583.921788][ T9355] binder: BINDER_SET_CONTEXT_MGR already set [ 583.934466][ T9355] binder: 9351:9355 ioctl 40046207 0 returned -16 09:15:20 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x18f00, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000080)={0x7, 0x2}) 09:15:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x1000000}) 09:15:20 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) signalfd4(r1, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) [ 584.116964][ T9374] binder: 9370:9374 unknown command 20988095 09:15:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x2}) [ 584.157865][ T9374] binder: 9370:9374 ioctl c0306201 20000280 returned -22 [ 584.236035][ T9383] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:20 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) 09:15:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x2000000}) [ 584.287959][ T9383] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x3}) 09:15:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3000000}) 09:15:20 executing program 3: io_uring_setup(0x84b, &(0x7f00000002c0)={0x0, 0x0, 0xb, 0x0, 0x15f}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x41, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000340)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440005f00000040404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x8, 0x5, 0x1, 'queue0\x00', 0x3ff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_WIE_ON(r3, 0x700f) [ 584.517698][ T9383] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 584.542592][ T9383] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x4}) [ 584.677674][ T9399] binder: 9396:9399 unknown command -1992726 [ 584.708698][ T9399] binder: 9396:9399 ioctl c0306201 200000c0 returned -22 [ 584.739869][ T9402] binder_alloc: 9396: binder_alloc_buf, no vma [ 584.771852][ T9399] binder: 9396:9399 ioctl 700f 0 returned -22 [ 584.798309][ T9402] binder: 9396:9402 unknown command -1992726 [ 584.806241][ T9403] binder: BINDER_SET_CONTEXT_MGR already set [ 584.813434][ T9402] binder: 9396:9402 ioctl c0306201 200000c0 returned -22 [ 584.840420][ T9403] binder: 9396:9403 ioctl 40046207 0 returned -16 [ 584.862653][ T9378] binder: BINDER_SET_CONTEXT_MGR already set [ 584.871907][ T9378] binder: 9370:9378 ioctl 40046207 0 returned -16 [ 584.880984][ T9372] binder: 9370:9372 unknown command 20988095 [ 584.888169][ T9372] binder: 9370:9372 ioctl c0306201 20000280 returned -22 09:15:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000000)) 09:15:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x4000000}) 09:15:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x5}) 09:15:21 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x6, 0x0, 'queue1\x00', 0x80000001}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x1, @local, 0x92e}, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x3ff}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, [], 0x1}}], 0x64) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000240)={0x0, 0x80, 0x66, r5, 0x0, &(0x7f0000000200)={0xa00906, 0x1, [], @p_u16=&(0x7f00000001c0)=0x7f}}) flock(r6, 0x6) 09:15:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x80, 0xffffffff, 0x2) [ 585.100798][ T9414] binder: BINDER_SET_CONTEXT_MGR already set [ 585.131558][ T9414] binder: 9410:9414 ioctl 40046207 0 returned -16 09:15:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x5000000}) [ 585.161733][ T9419] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x6}) 09:15:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000005c0)={0x1, 0x1, &(0x7f0000000480)=[0x48000], &(0x7f00000004c0)=[0x7509, 0x4], &(0x7f0000000500)=[0x5, 0x3, 0x7], &(0x7f0000000580)=[0x7f, 0x8, 0x81, 0x100, 0x6e], 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer], 0x0, 0x2, 0x0}) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x3, 0x35, &(0x7f0000000080)}) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 585.224617][ T9419] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 585.242119][ T9420] binder_alloc: 9412: binder_alloc_buf, no vma [ 585.309524][ T9420] binder: 9412:9420 ioctl 8040552c 20000000 returned -22 09:15:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x7}) 09:15:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x6000000}) [ 585.398144][ T9431] binder_alloc: 9423: binder_alloc_buf, no vma [ 585.435486][ T9431] binder: 9423:9431 ioctl 4b72 20000000 returned -22 [ 585.471132][ T9433] binder: BINDER_SET_CONTEXT_MGR already set [ 585.503949][ T9433] binder: 9410:9433 ioctl 40046207 0 returned -16 [ 585.522589][ T9419] binder: 9410:9419 ioctl c0205647 20000240 returned -22 09:15:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x7000000}) 09:15:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x8}) [ 585.925327][ T9420] binder_alloc: 9412: binder_alloc_buf, no vma 09:15:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x8000000}) 09:15:22 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x11e, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESDEC=r1], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000420ffebefac5856acb32eb8e3fc334368820951132428b9d669602aa995207e87e2442e0d65391bde658886ee03916470000000000000094cb70105e6a387a027ba67d239779899523a411ec3fe5da835e685454e5050d6c1f79c6a0d4fe98b5e8a31918fff1c196c9302592273f85e1b964d4a4be1e3b284ce412b7a02fab00d219ffcf4abf362ff63dcc6dfa376b2b993aa2bd904e39a91636a2fef350641798ea7a31af4100d4d332be36a00956acedecaddc661d32f82ed3d7ca1c28ee64b56ffd7eeb2162698440227da9d500"/240], @ANYBLOB="4f1a103e48139e2eac02acccef6a3dc321a24da9cc142d868f142bf1fd55708f86a5e7347776f334ac7eff8cfda0c80e3a6021359c40000000000000008aa95d9ca520373e001af952e0b5a202d96ab529b2ce9e6ef16f8016f4b3cba4142ae1f3b4153a7c6a1eb19f937b878e8a566312b1b84e4b90e719ba6dbbe7ab60f38c0c1c56633b66b320262eefd438d9b54371d2653650e8feb9480c669f7303de44133a9c0c385058343858fc535d483c34720cb0cfe0afd3a572ad4cfdede914fafef873c068b7ab8af353672a627afabae917aa44986f8c152b91"], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)={0x16, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x79}) 09:15:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000680)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x164, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ad9d062}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16c6f3c6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc228}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3fc99d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8a1bf1d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab5be9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x316feada}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fac60e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c846563}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ad1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x638a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a6f69e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cbf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eb717c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf853}]}, {0x89, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9687}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x788}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46bc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8745}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2be4ff1a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5965b519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d0ee2f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x32917af5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x569a3fa9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29de}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d9a2a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f013c1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ecfd890}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x1d0, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf44c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfd16927}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c3a6461}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5265b3e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa496}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f4ddc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed18}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39aca2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54aa9812}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57c9e3c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6333a354}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x203fc532}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55ef7ce6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28398312}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bc30ace}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c5e55ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47790552}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51b9aa9e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75abd14a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63f3d4ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc090}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x292dc7a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ffbf74c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a805d41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a42d29e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) r3 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x3, 0x0, 0x4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000000c0)={{0x3, @addr=0x3ff}, "57e9fd20640f610037ae1f9658ef79a7910bb0f501e7cbb50ff3ed21ca8f3a99", 0x1}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000200)={0x3, 0xff, "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"}) fanotify_init(0x2, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x509501, 0x0) 09:15:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x300}) [ 586.098258][ T9452] binder: BINDER_SET_CONTEXT_MGR already set [ 586.107799][ T9453] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 586.124404][ T9431] binder: 9423:9431 ioctl 4b72 20000000 returned -22 [ 586.136553][ T9452] binder: 9447:9452 ioctl 40046207 0 returned -16 09:15:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xb000000}) [ 586.156390][ T9455] binder: BINDER_SET_CONTEXT_MGR already set [ 586.171527][ T9453] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 586.185590][ T9455] binder: 9447:9455 ioctl 40046207 0 returned -16 09:15:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x500}) 09:15:22 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000240)={0x1, r4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000080)={0xff, 0x1, 0x4, 0x80000000, 0x6, {0x0, 0x2710}, {0x1, 0xc, 0x4, 0x65, 0x7, 0x7, "cfded83c"}, 0x5b12, 0x2, @planes=&(0x7f0000000000)={0x1, 0x4, @userptr, 0x4}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$CAPI_SET_FLAGS(r5, 0x80044324, &(0x7f0000000100)=0x1) [ 586.249692][ T9455] binder: BINDER_SET_CONTEXT_MGR already set [ 586.260432][ T9455] binder: 9447:9455 ioctl 40046207 0 returned -16 [ 586.297156][ T9455] binder: 9447:9455 ioctl 40247007 20000380 returned -22 09:15:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x35, 0x7, 0x10, 0xf, 0x0, 0xd897, 0x1, 0x1d, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000240)={0x28, r3, 0x301, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048803}, 0x4028001) [ 586.401812][ T9456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 586.413883][ T9470] binder_alloc: 9463: binder_alloc_buf, no vma [ 586.439596][ T9456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x17000000}) 09:15:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x600}) [ 586.454250][ T9470] binder: 9463:9470 ioctl c0585611 20000080 returned -22 09:15:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3b000000}) 09:15:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x700}) [ 586.660818][ T9471] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 586.693957][ T9471] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x3f000000}) [ 586.880999][ T9455] binder: BINDER_SET_CONTEXT_MGR already set [ 586.892633][ T9455] binder: 9447:9455 ioctl 40046207 0 returned -16 [ 586.913699][ T9456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 586.931235][ T9452] binder: BINDER_SET_CONTEXT_MGR already set [ 586.937525][ T9452] binder: 9447:9452 ioctl 40046207 0 returned -16 [ 586.945106][ T9455] binder: BINDER_SET_CONTEXT_MGR already set [ 586.961287][ T9456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 586.973108][ T9455] binder: 9447:9455 ioctl 40046207 0 returned -16 [ 586.973781][ T9495] binder: BINDER_SET_CONTEXT_MGR already set 09:15:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 587.007920][ T9495] binder: 9447:9495 ioctl 40046207 0 returned -16 [ 587.126559][ T9470] binder_alloc: 9463: binder_alloc_buf, no vma [ 587.134841][ T9470] binder: 9463:9470 ioctl c0585611 20000080 returned -22 [ 587.150743][ T9461] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 587.188839][ T9461] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:23 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$P9_RSTAT(r3, &(0x7f00000000c0)={0x80, 0x7d, 0x2, {0x0, 0x79, 0x200, 0xfff, {0x4, 0x0, 0x8}, 0x81050000, 0x3, 0x4, 0x5, 0x16, 'cgroupwlan0vmnet0eth0\'', 0x1, ':', 0x2a, 'cpusetcpusetselfcgroupmime_typetrusted.%&@', 0x5, '[ppp1'}}, 0x80) 09:15:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xff000000}) 09:15:23 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0xff00}) 09:15:23 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c5397737fcf0cba7bda0b630000"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0xfffffffffffffd87, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2088040, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any'}, {@debug={'debug', 0x3d, 0x8}}], [{@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, '\\\x18em0cpusetvboxnet1eth0\xc8eth1!'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@obj_role={'obj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role'}}]}}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 587.370289][ T9473] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 587.401020][ T9473] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 587.516552][ T9510] binder: 9507:9510 unknown command 1939297068 [ 587.569492][ T9510] binder: 9507:9510 ioctl c0306201 200000c0 returned -22 [ 587.573540][ T9516] binder: BINDER_SET_CONTEXT_MGR already set 09:15:23 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x50) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={0x0, 0x7f, 0x8, 0x9, 0x5}) 09:15:23 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x1000000}) 09:15:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xffffff7f}) 09:15:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/rtc0\x00', 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = getpid() rt_sigqueueinfo(r4, 0x13, &(0x7f00000002c0)={0x2c, 0x7}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080)) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0xd, 0x0, 0x1, 0x18}) [ 587.617910][ T9516] binder: 9507:9516 ioctl 40046207 0 returned -16 [ 587.620503][ T9514] binder: BINDER_SET_CONTEXT_MGR already set [ 587.667787][ T9514] binder: 9508:9514 ioctl 40046207 0 returned -16 [ 587.681154][ T9516] binder: BINDER_SET_CONTEXT_MGR already set [ 587.687370][ T9516] binder: 9507:9516 ioctl 40046207 0 returned -16 [ 587.732312][ T9514] binder: BINDER_SET_CONTEXT_MGR already set [ 587.739629][ T9514] binder: 9508:9514 ioctl 40046207 0 returned -16 [ 587.751333][ T9528] binder: BINDER_SET_CONTEXT_MGR already set [ 587.794739][ T9528] binder: 9508:9528 ioctl 40046207 0 returned -16 [ 587.825109][ T9534] binder: BINDER_SET_CONTEXT_MGR already set 09:15:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0xb00000, &(0x7f00000003c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off='xino=off'}, {@metacopy_on='metacopy=on'}, {@index_off='index=off'}, {@nfs_export_on='nfs_export=on'}, {@index_on='index=on'}, {@index_off='index=off'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}]}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="126348400000000000000000f6e476c5e0554a886e00000000000000000100080000001800000500000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) getsockname$ax25(r3, &(0x7f0000000080)={{0x3, @null}, [@rose, @netrom, @netrom, @null, @default, @netrom, @remote, @default]}, &(0x7f0000000000)=0x48) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 587.849992][ T9534] binder: 9525:9534 ioctl 40046207 0 returned -16 09:15:24 executing program 2: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) io_uring_setup(0x65, &(0x7f0000000040)) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="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"], @ANYRES64, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x3, 0x0, 0x4000) 09:15:24 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x2000000}) 09:15:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 587.892893][ T9534] binder: BINDER_SET_CONTEXT_MGR already set [ 587.917942][ T9534] binder: 9525:9534 ioctl 40046207 0 returned -16 [ 587.931811][ T9537] binder: BINDER_SET_CONTEXT_MGR already set [ 587.973488][ T9537] binder: 9525:9537 ioctl 40046207 0 returned -16 09:15:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @loopback, 0x4e22, 0x0, 'wrr\x00', 0x1, 0x9, 0x2d}, 0x2c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40247007, &(0x7f0000000380)) [ 588.056919][ T9544] binder: BINDER_SET_CONTEXT_MGR already set [ 588.066834][ T9544] binder: 9540:9544 ioctl 40046207 0 returned -16 [ 588.095657][ T9544] binder: BINDER_SET_CONTEXT_MGR already set 09:15:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x2}) [ 588.116134][ T9544] binder: 9540:9544 ioctl 40046207 0 returned -16 [ 588.127042][ T9551] binder_alloc: 9539: binder_alloc_buf, no vma [ 588.142477][ T9544] binder: BINDER_SET_CONTEXT_MGR already set [ 588.159205][ T9544] binder: 9540:9544 ioctl 40046207 0 returned -16 [ 588.181940][ T9544] binder: BINDER_SET_CONTEXT_MGR already set [ 588.202367][ T9544] binder: 9540:9544 ioctl 40046207 0 returned -16 [ 588.219444][ T9553] binder: BINDER_SET_CONTEXT_MGR already set [ 588.234512][ T9555] binder: BINDER_SET_CONTEXT_MGR already set [ 588.237521][ T9553] binder: 9552:9553 ioctl 40046207 0 returned -16 [ 588.251197][ T9555] binder: 9540:9555 ioctl 40046207 0 returned -16 [ 588.269099][ T9544] binder: BINDER_SET_CONTEXT_MGR already set [ 588.279641][ T9544] binder: 9540:9544 ioctl 40046207 0 returned -16 [ 588.284092][ T9553] binder: BINDER_SET_CONTEXT_MGR already set [ 588.293078][ T9516] binder: 9507:9516 unknown command 1939297068 [ 588.307928][ T9553] binder: 9552:9553 ioctl 40046207 0 returned -16 [ 588.312671][ T9516] binder: 9507:9516 ioctl c0306201 200000c0 returned -22 09:15:24 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b6400cdf893b9af4fea229f7ca135a903817dc60b89b375c5d0c24470bc19b72b62cbc138339db3e4e4fea364feaa3c35ae1f454d4a6132ac0fe58488535bb071e1131b4c8e37aec97dc06ae47c5e94fc78a419b5a8076423768814"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000240)={0x18, 0x1, 0x0, {0x3d5f3505}}, 0x18) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KDDISABIO(r2, 0x4b37) 09:15:24 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x3000000}) 09:15:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3}) 09:15:24 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 588.343379][ T9510] binder: BINDER_SET_CONTEXT_MGR already set [ 588.351924][ T9510] binder: 9507:9510 ioctl 40046207 0 returned -16 [ 588.366011][ T9564] binder: BINDER_SET_CONTEXT_MGR already set [ 588.374907][ T9564] binder: 9507:9564 ioctl 40046207 0 returned -16 09:15:24 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = accept$ax25(r3, &(0x7f00000000c0)={{0x3, @rose}, [@default, @rose, @null, @netrom, @bcast, @default, @rose, @null]}, &(0x7f0000000000)=0x48) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)) 09:15:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x4}) [ 588.620287][ T9581] binder: BINDER_SET_CONTEXT_MGR already set [ 588.626334][ T9581] binder: 9574:9581 ioctl 40046207 0 returned -16 [ 588.702118][ T9576] binder: BINDER_SET_CONTEXT_MGR already set [ 588.708137][ T9576] binder: 9574:9576 ioctl 40046207 0 returned -16 [ 588.720080][ T9587] binder: BINDER_SET_CONTEXT_MGR already set [ 588.726081][ T9587] binder: 9574:9587 ioctl 40046207 0 returned -16 09:15:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8040, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000000c0)={{{0x7}}, 0x3, 0xfffffbff, &(0x7f0000000080)="f03e4b"}) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:25 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8001, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x4000000}) 09:15:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x5}) 09:15:25 executing program 2: r0 = io_uring_setup(0x66, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 588.945997][ T9597] QAT: Invalid ioctl [ 588.963565][ T9602] QAT: Invalid ioctl 09:15:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x5000000}) 09:15:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x6}) 09:15:25 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x886}, 0x11) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getgid() sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) 09:15:25 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x244}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000100)=0x1, 0x4) 09:15:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x7}) [ 589.218118][ T9616] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 589.255683][ T9616] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x6000000}) [ 589.325226][ T9628] binder_alloc: 9617: binder_alloc_buf, no vma 09:15:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x8}) 09:15:25 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc0b00, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x6) r1 = io_uring_setup(0x65, &(0x7f0000000040)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="76644c4875a52eb3080000005910ffedeb73bf23f55dccbd45b2a2dff29bb6695c83b3057c9922ea6d47a24d02a7070279c6355d0791391ce7e8be82858df59274d956ddfcd6e3b0bbb770ecf99081caa76adc97cfff7234c63915186254000000000000000000000000000000000000000000000000c3d39e799e72e677a65f008701b9054b9f5ac2075ca905f223e0815d4c1b9b8cfec46a7cb3d8f75f08e0896d9520a790c346de1c18ec081746b8a33aeb300db4a6d699f23659d28788476f3e"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x3, 0x0, 0x4000) 09:15:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x7000000}) 09:15:25 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x17, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xc, &(0x7f0000000080)={r5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x201, 0xc83, 0x1, r5}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b37ea0661418583a8db6300003707c391e13f85209f139490bd39ec940f02eb49806a0828c7ed39023f2ee3851637dd9d5635ac57ccc8ae744cff85b408"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYPTR64, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYPTR, @ANYRES32, @ANYRESOCT, @ANYRES32=r2, @ANYRESDEC]]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x1f, 0xf, 0x0, 0xfffffffe, 0x0, 0x1}) [ 589.569107][ T9643] binder: BINDER_SET_CONTEXT_MGR already set [ 589.584942][ T9643] binder: 9637:9643 ioctl 40046207 0 returned -16 [ 589.616084][ T9639] binder: BINDER_SET_CONTEXT_MGR already set [ 589.626792][ T9639] binder: 9637:9639 ioctl 40046207 0 returned -16 09:15:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x8000000}) 09:15:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0xb}) [ 589.702143][ T9649] binder: BINDER_SET_CONTEXT_MGR already set [ 589.708174][ T9649] binder: 9646:9649 ioctl 40046207 0 returned -16 [ 589.716188][ T9643] binder: BINDER_SET_CONTEXT_MGR already set [ 589.729768][ T9643] binder: 9637:9643 ioctl 40046207 0 returned -16 09:15:26 executing program 5: sendto$rose(0xffffffffffffffff, &(0x7f0000000080)="a5483141b0d228985fd515ec2b0d9fe580d2942008821d8e43c91710e01c0f5db93cf29c77bcb128d052f5610f5b016bf4e82024f1ad2521bd54edc91132c07de0f4449841f35529e30ff6b9fb4e8fe65fc7e1c2eb44064880e199e2bfd876862ad55bf72a4dc78a6f61bfe3723ec49ae64a55ac7e910b74b8cf913bd5f5690975e6fe59beda537edad78023f3c2fe3e1387a89d51", 0x95, 0x14, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x40) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0xfffffffe}) 09:15:26 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0xfdfdffff}) 09:15:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x17}) 09:15:26 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0xff000000}) 09:15:26 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x680800, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x2, 0x8001, 0x9, 0x4}, 0x3d, [0x4, 0x5, 0x7, 0x8001661, 0x3, 0x0, 0xce0, 0x8, 0x3, 0x7fffffff, 0x800, 0x2, 0x6, 0x9, 0x8, 0xad, 0x1, 0x9d, 0x7fffffff, 0x1f, 0x401, 0x866, 0x5, 0x2, 0x1, 0x8, 0x80000001, 0x6, 0xa907, 0x3f, 0xd1, 0x9, 0x7, 0x3, 0x800, 0x7ff, 0x1, 0xcbc, 0xffff, 0x8, 0x96, 0x800, 0x6, 0x8, 0x9, 0x0, 0x7ff, 0x0, 0xfff, 0x0, 0x5, 0x5, 0x1, 0xee13, 0x2, 0xe5, 0x3, 0x7fff, 0x5, 0x3, 0x10000, 0xb4, 0x4c8, 0x80000000], [0x30, 0x8, 0x92, 0x6, 0x80000000, 0x4, 0x3f, 0x7, 0x8, 0x8, 0x7, 0xff, 0x7, 0xfff, 0x4, 0x80000000, 0xfff, 0x200, 0x7f, 0xa1, 0x9, 0xffffffff, 0xfffffff9, 0x2, 0x8, 0x5, 0x7ff, 0x4, 0x6, 0xa823, 0x3, 0x6a8, 0x200, 0x7, 0x2, 0x7, 0x7, 0x527, 0x427, 0x2ae7a69b, 0x2, 0x6, 0x4, 0x401, 0x3f, 0xffffffff, 0x6, 0x1, 0x80, 0x20, 0xfffffff7, 0x9, 0x5, 0x9add, 0x5, 0x4, 0x5, 0x7, 0xffffffff, 0xfff, 0x2, 0x7ff, 0x800, 0x80], [0x9, 0xffff, 0x57, 0x6, 0x1f, 0x623e, 0x0, 0x1, 0xfffffff7, 0xfffffffe, 0x7, 0x8001, 0x9, 0xfffffff9, 0x7, 0x1d41, 0xfff, 0x80000001, 0x1, 0x6, 0x1, 0xfffffffb, 0x2, 0x0, 0x10000, 0x9, 0xfffff86d, 0x8, 0xd13, 0x8, 0x3, 0x6c36, 0x6, 0x651, 0x1, 0x1, 0xfffffffa, 0x8, 0x5, 0x1, 0x6, 0x3, 0xb2ab, 0x40, 0x2, 0x92, 0xe9b6, 0x6, 0x9, 0x459d16e8, 0x5, 0xffff7fff, 0x8, 0x3, 0xfffff404, 0x1, 0x5, 0x80000000, 0x8, 0x0, 0x3, 0x0, 0x1, 0xfff], [0xcb, 0x4, 0x9, 0x0, 0x4, 0x7fffffff, 0x2ad, 0x200, 0x1000, 0x8, 0x4, 0xc7, 0x70000000, 0x400, 0x2, 0x84, 0xffffffff, 0x1, 0x28b, 0x2, 0x3ff, 0x4, 0x0, 0x568c, 0x5, 0x400, 0x98, 0x80000000, 0x3, 0x1ff, 0x7, 0xb4c034f8, 0x9, 0x8000, 0x3, 0x1, 0x37c, 0x6, 0x161e, 0x80, 0x0, 0x6, 0x1, 0x0, 0x6, 0x6b4, 0xffffffff, 0x2, 0x101, 0x3, 0x5, 0x401, 0xfffffff9, 0x0, 0x9, 0x7, 0x40, 0xb8, 0x3, 0xff, 0x2, 0x40, 0xfff, 0x100]}, 0x45c) 09:15:26 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44b0110929b75154}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20002, 0x1a0) mq_timedreceive(r2, &(0x7f0000000280)=""/119, 0x77, 0x7fff, &(0x7f0000000140)) 09:15:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3b}) [ 590.207976][ T9670] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 590.265925][ T9670] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 590.346374][ T9639] binder: BINDER_SET_CONTEXT_MGR already set [ 590.367353][ T9639] binder: 9637:9639 ioctl 40046207 0 returned -16 [ 590.369434][ T9643] binder: BINDER_SET_CONTEXT_MGR already set [ 590.395322][ T9643] binder: 9637:9643 ioctl 40046207 0 returned -16 [ 590.402969][ T9680] binder: BINDER_SET_CONTEXT_MGR already set [ 590.411439][ T9680] binder: 9637:9680 ioctl 40046207 0 returned -16 09:15:26 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KDENABIO(r4, 0x4b36) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:15:26 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0xfffffdfd}) 09:15:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x300}) 09:15:26 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x202, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 590.543541][ T9675] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 590.599702][ T9675] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 590.632624][ T9689] binder: BINDER_SET_CONTEXT_MGR already set [ 590.642614][ T9689] binder: 9683:9689 ioctl 40046207 0 returned -16 09:15:26 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:15:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x500}) 09:15:27 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @mcast2}, 0x1c) [ 590.731841][ T9697] binder: BINDER_SET_CONTEXT_MGR already set [ 590.755919][ T9697] binder: 9683:9697 ioctl 40046207 0 returned -16 09:15:27 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x2}) 09:15:27 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 09:15:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x600}) [ 590.993219][ T9707] binder_alloc: 9700: binder_alloc_buf, no vma 09:15:27 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x3}) 09:15:27 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000600)={0x2, 0x0, [{}, {}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@handle={0x73682a85, 0xb, 0x3}, @flat=@weak_binder={0x77622a85, 0x1080}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1263484000000000000000000000faff0000000000000000000000000000000000000000480000000000000018000000000000002558d00cd2ba4ff363b43a6fb5a45dc2be2396d46a209d41e15553524e29bb2187147436157512a1caaf2505a245c0", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x7, 0x401}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e22, @loopback}}, [0x7ff, 0x4, 0x8, 0x4, 0x7ff, 0x7ff, 0x6, 0x3, 0x9, 0x7d8, 0x0, 0x0, 0x897, 0x0, 0x2]}, &(0x7f00000004c0)=0x100) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 591.266199][ T9716] binder: BINDER_SET_CONTEXT_MGR already set [ 591.297384][ T9716] binder: 9713:9716 ioctl 40046207 0 returned -16 [ 591.333740][ T9717] binder: BINDER_SET_CONTEXT_MGR already set [ 591.352410][ T9717] binder: 9713:9717 ioctl 40046207 0 returned -16 [ 591.378116][ T9717] binder: BINDER_SET_CONTEXT_MGR already set [ 591.397045][ T9717] binder: 9713:9717 ioctl 40046207 0 returned -16 [ 591.402406][ T9697] binder: BINDER_SET_CONTEXT_MGR already set [ 591.414203][ T9697] binder: 9683:9697 ioctl 40046207 0 returned -16 [ 591.487670][ T9689] binder: BINDER_SET_CONTEXT_MGR already set [ 591.498445][ T9689] binder: 9683:9689 ioctl 40046207 0 returned -16 09:15:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x18, 0x1, 0x0, 0x1d}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x80000000}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1cd800, 0x2}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x0) ioctl$KDENABIO(r1, 0x4b36) 09:15:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x700}) 09:15:27 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x4}) [ 591.695340][ T9707] binder: BINDER_SET_CONTEXT_MGR already set [ 591.705651][ T9707] binder: 9700:9707 ioctl 40046207 0 returned -16 09:15:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0xb00}) 09:15:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getpeername$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x20) 09:15:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x5}) 09:15:28 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x9, 0x0, [{0x0, 0x4, 0x9, 0x0, 0x69}, {0x80000007, 0x6, 0x1000, 0x3, 0x200}, {0x80000000, 0x7, 0x6c0, 0x1, 0x1}, {0x4, 0x8000, 0x4, 0x7a9, 0x8000}, {0xc0000001, 0x80000001, 0x80000000, 0x5836, 0x7}, {0x0, 0x8, 0x5, 0xffff}, {0x2, 0x6, 0x6, 0x9df, 0x7f}, {0x80000008, 0x0, 0x7ff, 0x43, 0xf7}, {0x80000000, 0xffff22ff, 0x4, 0xe, 0x4}]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x100}, @fda={0x66646185, 0x7, 0x2, 0x34}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000000)=0x1000, 0x4) 09:15:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x1700}) 09:15:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x6}) [ 592.041901][ T9743] binder_alloc: 9738: binder_alloc_buf, no vma [ 592.044788][ T9747] binder: BINDER_SET_CONTEXT_MGR already set [ 592.087397][ T9747] binder: 9740:9747 ioctl 40046207 0 returned -16 09:15:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x7}) 09:15:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3b00}) 09:15:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001f1feb72abe5ec48266e2f3aabaafd3eada2eabc607415b46f6b978444d12038ac97e94a12c92230b6a6ea433d48af48618a16272c20e4f4e03e2388a6bd", @ANYRES16=r3, @ANYBLOB="01030000000000000000000000001400020077673100"/34], 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000005) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x4, {0x4cded7e5}}, 0x18) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000001c0)) close(r0) 09:15:28 executing program 2: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x9, 0x0, [{0x0, 0x4, 0x9, 0x0, 0x69}, {0x80000007, 0x6, 0x1000, 0x3, 0x200}, {0x80000000, 0x7, 0x6c0, 0x1, 0x1}, {0x4, 0x8000, 0x4, 0x7a9, 0x8000}, {0xc0000001, 0x80000001, 0x80000000, 0x5836, 0x7}, {0x0, 0x8, 0x5, 0xffff}, {0x2, 0x6, 0x6, 0x9df, 0x7f}, {0x80000008, 0x0, 0x7ff, 0x43, 0xf7}, {0x80000000, 0xffff22ff, 0x4, 0xe, 0x4}]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x100}, @fda={0x66646185, 0x7, 0x2, 0x34}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000000)=0x1000, 0x4) [ 592.314356][ T9759] binder: BINDER_SET_CONTEXT_MGR already set [ 592.340662][ T9759] binder: 9755:9759 ioctl 40046207 0 returned -16 09:15:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3f00}) [ 592.365107][ T9760] binder: BINDER_SET_CONTEXT_MGR already set [ 592.377159][ T9760] binder: 9756:9760 ioctl 40046207 0 returned -16 [ 592.392905][ T9765] binder: BINDER_SET_CONTEXT_MGR already set 09:15:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x8}) [ 592.416971][ T9765] binder: 9755:9765 ioctl 40046207 0 returned -16 [ 592.443091][ T9764] binder: 9755:9764 ioctl 800454d2 200001c0 returned -22 [ 592.474046][ T9770] binder: BINDER_SET_CONTEXT_MGR already set [ 592.511231][ T9770] binder: 9756:9770 ioctl 40046207 0 returned -16 09:15:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f0000000080)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) finit_module(0xffffffffffffffff, &(0x7f0000000240)='-nodev.wlan1proc)posix_acl_accesstrusted@}+\x00', 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x3}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40247007, &(0x7f0000000380)) [ 592.610654][ T9775] binder: BINDER_SET_CONTEXT_MGR already set [ 592.625142][ T9775] binder: 9774:9775 ioctl 40046207 0 returned -16 [ 592.706549][ T9777] binder: BINDER_SET_CONTEXT_MGR already set [ 592.735037][ T9778] binder: BINDER_SET_CONTEXT_MGR already set [ 592.736445][ T9777] binder: 9774:9777 ioctl 40046207 0 returned -16 [ 592.761705][ T9778] binder: 9738:9778 ioctl 40046207 0 returned -16 09:15:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x100, 0x101080) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=0x8) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:29 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x300}) 09:15:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0xff00}) 09:15:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x1000000}) 09:15:29 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x500}) 09:15:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000507000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="00000000000000021c00128009000100626f6e64000000000c00028008001400ffffffff7fc1b2f2a0a941081eac10a3cb70718d182d44eadde0abbd255cd3528078959ee19a63a435e646c337ebb4666a034ef538814d0a6e9c299ad3cc35a548e16bf078dc13959aec2b695df99b6c"], 0x3c}}, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) fsopen(&(0x7f0000000180)='nfs\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="00890000000010ab7e372cbc2644b94a00"], 0x0, 0x2, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r7) 09:15:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x2000000}) 09:15:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x307400, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x6c84}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)) 09:15:29 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x600}) [ 593.159878][ T9794] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 593.226677][ T9794] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3000000}) [ 593.308387][ T9801] binder: BINDER_SET_CONTEXT_MGR already set [ 593.338536][ T9801] binder: 9796:9801 ioctl 40046207 0 returned -16 09:15:29 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x700}) [ 593.408080][ T9775] binder: BINDER_SET_CONTEXT_MGR already set [ 593.425320][ T9775] binder: 9774:9775 ioctl 40046207 0 returned -16 [ 593.428660][ T9779] binder: BINDER_SET_CONTEXT_MGR already set [ 593.453298][ T9794] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 593.466582][ T9779] binder: 9774:9779 ioctl 40046207 0 returned -16 [ 593.490937][ T9794] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:29 executing program 5: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x4, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a2d, 0x0, [], @string=&(0x7f0000000000)=0xb4}}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40247007, &(0x7f0000000380)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', r5}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1348, r2, 0x20, 0x4, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_TAIL={0x7e0, 0xf, "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"}, @NL80211_ATTR_SSID={0x1e, 0x34, "e2801c4610e79905fce32b9ea99a730a1758f3ad12cb7cde6c7e"}, @NL80211_ATTR_PROBE_RESP={0x6c3, 0x91, "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"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IE_ASSOC_RESP={0x2ec, 0x80, "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"}, @NL80211_ATTR_IE_RIC={0x165, 0xb2, "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"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1348}}, 0x0) 09:15:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x4000000}) 09:15:29 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0xff00}) 09:15:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x5000000}) 09:15:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x530ec0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x1000000}) 09:15:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x13d640, 0x0) ioctl$RTC_SET_TIME(r3, 0x40247007, &(0x7f0000000380)) 09:15:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x6000000}) [ 594.073075][ T9829] binder: BINDER_SET_CONTEXT_MGR already set [ 594.117712][ T9829] binder: 9828:9829 ioctl 40046207 0 returned -16 [ 594.168206][ T9829] binder: BINDER_SET_CONTEXT_MGR already set [ 594.198025][ T9829] binder: 9828:9829 ioctl 40046207 0 returned -16 09:15:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x307400, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x6c84}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)) 09:15:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x100, 0xfffffffd}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x7001, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r6, 0xd, 0xffffffffffffffff, 0x0) sched_setparam(r6, &(0x7f0000000000)=0x4) 09:15:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x2000000}) 09:15:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x7000000}) 09:15:30 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x9, &(0x7f00000002c0)=[{0x2, 0x0, 0x3f, 0x7ff}, {0x5, 0x1, 0xe0, 0x4}, {0x50e7, 0x80, 0x0, 0x7ff}, {0x7, 0x5, 0x7, 0x3}, {0x7, 0x1, 0x30, 0x2}, {0x7af1, 0x81, 0x7f, 0x3}, {0x1f, 0x5, 0x3, 0x3}, {0x6, 0x10, 0x80, 0x4}, {0xd8e6, 0x3, 0x80, 0x2}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) 09:15:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x3000000}) [ 594.370746][ T9841] binder: BINDER_SET_CONTEXT_MGR already set [ 594.393150][ T9841] binder: 9837:9841 ioctl 40046207 0 returned -16 [ 594.403959][ T9843] binder_alloc: 9835: binder_alloc_buf, no vma [ 594.452429][ T9846] binder: BINDER_SET_CONTEXT_MGR already set [ 594.469544][ T9843] binder: 9835:9843 ioctl c0109207 20000140 returned -22 09:15:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x8000000}) [ 594.495814][ T9846] binder: 9842:9846 ioctl 40046207 0 returned -16 [ 594.536027][ T9852] binder: BINDER_SET_CONTEXT_MGR already set [ 594.577643][ T9852] binder: 9842:9852 ioctl 40046207 0 returned -16 09:15:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x4000000}) 09:15:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xc, &(0x7f0000000080)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x4}, 0x8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1}) 09:15:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0xb000000}) [ 594.850124][ T9862] binder: BINDER_SET_CONTEXT_MGR already set [ 594.884834][ T9862] binder: 9858:9862 ioctl 40046207 0 returned -16 09:15:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x5000000}) 09:15:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x17000000}) [ 594.928562][ T9862] binder: BINDER_SET_CONTEXT_MGR already set [ 594.955915][ T9862] binder: 9858:9862 ioctl 40046207 0 returned -16 09:15:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x307400, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x6c84}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)) 09:15:31 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004000) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x6000000}) 09:15:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3b000000}) 09:15:31 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="cb81e52d7d48b76638edfb68c3770597a35ce9"], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0xb, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="f5daeae29e152af969555d3443611140"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @fda={0x66646185, 0x3, 0x1, 0x2e}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/13], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000000c0)={0x570}, 0x4) [ 595.363431][ T9877] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 595.395553][ T9879] binder: 9878:9879 unknown command 770015691 [ 595.433788][ T9879] binder: 9878:9879 ioctl c0306201 20000200 returned -22 [ 595.445755][ T9877] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 595.453512][ T9884] binder: 9878:9884 unknown command 0 [ 595.464243][ T9883] binder: BINDER_SET_CONTEXT_MGR already set 09:15:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x7000000}) 09:15:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0x3f000000}) [ 595.488750][ T9884] binder: 9878:9884 ioctl c0306201 20000280 returned -22 [ 595.499256][ T9883] binder: 9880:9883 ioctl 40046207 0 returned -16 [ 595.533592][ T9879] binder: 9878:9879 unknown command 770015691 [ 595.547905][ T9879] binder: 9878:9879 ioctl c0306201 20000200 returned -22 [ 595.554600][ T9889] binder: 9878:9889 unknown command 0 [ 595.575556][ T9889] binder: 9878:9889 ioctl c0306201 20000280 returned -22 09:15:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0xff000000}) 09:15:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x8000000}) 09:15:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x0, 0xffffff7f}) 09:15:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0xfdfdffff}) 09:15:32 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32], @ANYRES32, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYBLOB="12d73c9a2955834693aba1c7537f273bd0539ddbe34e7d54ee40c7e1d70460cbff9b27a75a948b51ae2a43e8007dd4c976efd937ac6b547c8cfea3251c51fb796f161b2b341bd55a14b46828d8bb82cea206ce20f7e9f31280d201d56c4ab7e9e9868c0c3d4e704f4df3ab2cc3", @ANYRES16, @ANYBLOB="04650387b7099ad412b52f7b869ad0d7753b25bbc3f7ca1403dc57fed33fb85fc511354d9cc169d50034b82bcb165ac3b3e272353857330664ea193b1938a5e3ed7b3153c5e7e102d0902c94bebd1a317e7f516e2a04bfb843c5f2a3426ee57112cf79e9065f2a298c39741b065c00da12012643489471ccd8eab8140fb7b7a14f9fb888ed49c4f4f2b5998e921ba19ec2db5adb792c9f30129ce653b1606077", @ANYRES16, @ANYRESHEX, @ANYRES64], @ANYRES64]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00b1df00000000000000000000852a62770000000000000000000000000090c10000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$NBD_DISCONNECT(r3, 0xab08) [ 596.079040][ T9905] binder: BINDER_SET_CONTEXT_MGR already set [ 596.124532][ T9905] binder: 9904:9905 ioctl 40046207 0 returned -16 [ 596.154232][ T9907] binder: BINDER_SET_CONTEXT_MGR already set [ 596.176595][ T9907] binder: 9904:9907 ioctl 40046207 0 returned -16 09:15:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x307400, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x6c84}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)) 09:15:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0xff000000}) 09:15:32 executing program 5: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)) [ 596.445190][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 596.474565][ T9915] binder: 9912:9915 ioctl 40046207 0 returned -16 09:15:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0xfffffdfd}) 09:15:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:15:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x3, 0x1, 0x2, 0x0, 0xc5, 0x3, 0x800}) 09:15:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/109, 0x6d, 0x2, 0xb}, @flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x2, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x4000002) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x2}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xb, 0x0, [0x8, 0x17, 0x1d, 0x8, 0x7, 0x8, 0x1]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x5}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r7, 0x6, 0x40, 0x200}, &(0x7f0000000180)=0x10) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}) 09:15:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x21, 0x12, 0x8, 0x1e, 0x8, 0x8001, 0x2, 0xe8, 0x1}) [ 597.034678][ T9936] binder: BINDER_SET_CONTEXT_MGR already set [ 597.048654][ T9936] binder: 9934:9936 ioctl 40046207 0 returned -16 09:15:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) prctl$PR_SVE_GET_VL(0x33, 0x16588) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 597.091488][ T9940] binder: BINDER_SET_CONTEXT_MGR already set [ 597.116469][ T9940] binder: 9934:9940 ioctl 40046207 0 returned -16 [ 597.167867][ T9936] binder: BINDER_SET_CONTEXT_MGR already set [ 597.175033][ T9936] binder: 9934:9936 ioctl 40046207 0 returned -16 09:15:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x307400, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x6c84}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x40247007, &(0x7f0000000380)) 09:15:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}) [ 597.283321][ T9947] binder_alloc: 9943: binder_alloc_buf, no vma 09:15:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000, 0x4, 0x40}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:15:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000810) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000c2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0xa1f02c7963a479fc, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x140) [ 597.394650][ T9951] binder: BINDER_SET_CONTEXT_MGR already set [ 597.415371][ T9951] binder: 9949:9951 ioctl 40046207 0 returned -16 [ 597.432746][ T9953] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}) [ 597.454710][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 597.475956][ T9955] binder: 9952:9955 ioctl 40046207 0 returned -16 [ 597.484962][ T9953] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x9) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5}) [ 597.697547][ T9953] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 597.709831][ T9951] binder: BINDER_SET_CONTEXT_MGR already set [ 597.730366][ T9951] binder: 9949:9951 ioctl 40046207 0 returned -16 [ 597.736985][ T9964] binder: BINDER_SET_CONTEXT_MGR already set [ 597.757053][ T9953] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 597.762396][ T9964] binder: 9949:9964 ioctl 40046207 0 returned -16 [ 597.785534][ T9967] binder: 9949:9967 ioctl 8912 400200 returned -22 09:15:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000080)={0x7f, [0x4c4, 0x9, 0x4015bf76], [{0xff, 0x800, 0x1}, {0x3, 0x5, 0x1}, {0x20, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7fff, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x8000, 0x1}, {0x4, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x401, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xffffffff, 0x4, 0x0, 0x1, 0x1, 0x1}], 0x2}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x4}) [ 597.874274][ T9971] binder: BINDER_SET_CONTEXT_MGR already set [ 597.904296][ T9971] binder: 9969:9971 ioctl 40046207 0 returned -16 09:15:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}) 09:15:34 executing program 3: r0 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='/dev/rtc0\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000180)='@\x00', &(0x7f00000001c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$RTC_SET_TIME(r1, 0x7001, 0x0) 09:15:34 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x9) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 598.055888][ T9976] binder: BINDER_SET_CONTEXT_MGR already set [ 598.058488][ T9947] binder: BINDER_SET_CONTEXT_MGR already set [ 598.068181][ T9947] binder: 9943:9947 ioctl 40046207 0 returned -16 [ 598.089248][ T9976] binder: 9974:9976 ioctl 40046207 0 returned -16 09:15:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) finit_module(r1, &(0x7f0000000000)='\x00', 0x2) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7}) 09:15:34 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 598.182633][ T9983] binder: BINDER_SET_CONTEXT_MGR already set [ 598.202115][ T9983] binder: 9979:9983 ioctl 40046207 0 returned -16 09:15:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9f94, 0x1a400) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={0x0, 0x3, 0x7}) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x74, 0x40) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000140)={0xbd, 0x14}) 09:15:34 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x9) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 598.327501][ T9993] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 598.401075][ T9993] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200001, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@private1, 0x1f, r3}) 09:15:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="e86304407231fafc0063404001fc1b253144a99b3ce99d3f5665ad59a5e7eb5bf3cc1a70e61072cc921ed24d9467a9e32e3a8933fbdbdf8af743e41ebcd8d23dc95d91d50865721660078ee3c68c4514dc500d4eb2efa2ad4e381af7911dea766c854a5316b51e33234d1f2b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000180)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, 'eth1.(-bdev'}}, 0x2c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000024000b0f00000000fedbdf2500000000978730c4d59b88a6eba17bcfe07a435834f1979708002308e2", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001006874620034000200180002000300000000040200050000000000000000000000180002000300000000000000000000200000000000000000"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', r5}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={[], [], @local}, @rand_addr=' \x01\x00', @local, 0x2, 0x6, 0x4, 0x400, 0x8, 0x4200000, r7}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000000d80)={0x8bc, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r5}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x744}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x238}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffffff17}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x200, 0xd5, 0x81, 0x10000}, {0xb4, 0xff, 0x8, 0x5c2b}, {0xd818, 0x32, 0xf9, 0x7d4e1802}, {0x11f0, 0x18, 0x7f, 0x5}, {0x0, 0xff, 0x81, 0xacd}, {0x100, 0x1, 0xff, 0x800}, {0x6, 0x80, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x1, 0x0, 0x10b8}, {0x7f, 0xb3, 0x18, 0xffffffba}, {0x0, 0x3, 0xc7, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x8bc}}, 0x40) [ 598.524297][T10002] binder_alloc: 9995: binder_alloc_buf, no vma [ 598.535642][T10001] binder: BINDER_SET_CONTEXT_MGR already set [ 598.542496][T10001] binder: 10000:10001 ioctl 40046207 0 returned -16 [ 598.563738][T10002] binder: 9995:10002 ioctl c0182101 20000180 returned -22 09:15:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}) [ 598.632668][T10010] binder: BINDER_SET_CONTEXT_MGR already set [ 598.659531][T10011] binder: 10004:10011 unknown command 1074029544 [ 598.663638][T10010] binder: 10000:10010 ioctl 40046207 0 returned -16 [ 598.665977][T10011] binder: 10004:10011 ioctl c0306201 20000280 returned -22 09:15:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) exit_group(0x6) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x340, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x67a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x648c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x632}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fffffff, @empty, 0x1}}}}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff3a37}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x202}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x340}}, 0x44011) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) [ 598.675296][T10011] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 09:15:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x500}) 09:15:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xda46, 0x1c1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="177f281989000000000608"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc015) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) 09:15:35 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0xc5, 0x20000000, 0x129}) 09:15:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b6300b612867fd9f1a1a8035bcfe4fd25bde35388c6fa06e24f"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @fda={0x66646185, 0x2, 0x0, 0x3f}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$uinput_user_dev(r4, &(0x7f0000000700)={'syz0\x00', {0x101, 0x5, 0xffff, 0x81}, 0x45, [0x1, 0x6, 0x20, 0x1, 0x73, 0x8fa9, 0x80000001, 0x0, 0x6, 0x81, 0x80000001, 0x4, 0x1ff, 0x9, 0x1794, 0x9, 0x9, 0x1ff, 0x2, 0x2, 0x4, 0x1cd, 0x34cb, 0x282, 0x8, 0x401, 0x4, 0x101, 0x8001, 0x100, 0x4, 0x1e, 0x10001, 0x0, 0x8, 0x9, 0x800, 0x5, 0x1, 0xa, 0xffffffff, 0x8, 0x1, 0x100, 0xff, 0x80000001, 0x6, 0x200, 0x2, 0xffffffff, 0x3f, 0x1, 0x2, 0x8108, 0x5, 0x9, 0x8, 0x0, 0x8, 0x10000, 0x5f, 0x0, 0x6, 0x401], [0x0, 0x5, 0x200, 0x1000, 0x1f, 0x8, 0x0, 0x3, 0x10001, 0xfffffeff, 0x2, 0x3e9, 0x3ff, 0x8, 0x4, 0xd9a, 0x6, 0x1f, 0x20, 0x7, 0x4, 0x1f, 0x800, 0x10000, 0x7ff, 0x7ff, 0xfb, 0x6, 0xaa5, 0x4, 0x8, 0x400, 0x572, 0x2, 0x227d, 0x7, 0x7fff, 0x100000, 0x3, 0x0, 0x5, 0x1, 0xfffffffd, 0x0, 0x8, 0x1, 0x4, 0x4, 0x3f, 0x9, 0x90000, 0xa18, 0x7ff, 0x4, 0xe17, 0x3, 0x7, 0x7d, 0x6, 0x6, 0xf8, 0xff, 0x2, 0x1f], [0x8, 0x7fff, 0x8, 0xffff, 0x8, 0x3, 0x9, 0x1c00, 0x7, 0x77bbbfa7, 0x100, 0x80000000, 0xd48, 0x1, 0x899, 0x4, 0x2, 0x45c8, 0x7ff, 0x40, 0x7fff, 0x80000001, 0x3ff, 0x81, 0x7, 0x2, 0x6, 0x13e0, 0x0, 0x8001, 0x1, 0x2, 0x8, 0x3, 0x400, 0x8000, 0x0, 0xe6, 0x8, 0x0, 0x8, 0x80, 0x4, 0xfffffff9, 0x5, 0x3, 0x3, 0x1f, 0xc66, 0x6, 0x1, 0x8, 0x63, 0xfffffffa, 0x6, 0x54c, 0x212f875b, 0x5, 0x4, 0x7fffffff, 0x80000001, 0x81, 0x3, 0x1], [0x9, 0x1, 0x3b1, 0x7, 0x58, 0x4, 0x2, 0x4, 0x1, 0x5, 0xffffffff, 0x6, 0x9, 0x3, 0xffff8001, 0x8, 0x7fff, 0x3, 0x2, 0xd9, 0x3438, 0x4, 0x9, 0x2, 0x4, 0x81, 0xbb, 0x7, 0xffff, 0x4, 0x7c, 0xf80000, 0x3, 0xfffffffd, 0x0, 0xfffff001, 0x1c7, 0x572, 0x2, 0x297, 0x7fffffff, 0xa5c, 0x9, 0x401, 0x2, 0xfffffbff, 0x6, 0x3f, 0x4, 0x3d6, 0xffffffff, 0xfa34, 0x2, 0x4, 0x9, 0x74f3, 0x4, 0x8, 0x4, 0x7, 0x9, 0x9, 0x7ff, 0x81]}, 0x45c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:35 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x600}) [ 598.948951][T10026] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 598.972603][T10026] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 599.052863][T10030] binder: 10028:10030 unknown command -1241488629 [ 599.070771][T10030] binder: 10028:10030 ioctl c0306201 200000c0 returned -22 [ 599.092994][T10030] binder_alloc: 10028: binder_alloc_buf, no vma [ 599.131848][T10033] binder: 10028:10033 unknown command -1241488629 [ 599.135028][T10034] binder: BINDER_SET_CONTEXT_MGR already set [ 599.138308][T10033] binder: 10028:10033 ioctl c0306201 200000c0 returned -22 [ 599.160294][T10034] binder: 10028:10034 ioctl 40046207 0 returned -16 [ 599.168332][T10030] binder: 10028:10030 unknown command 1077936176 [ 599.178431][T10030] binder: 10028:10030 ioctl c0306201 20000280 returned -22 [ 599.200019][T10026] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 599.238687][ T9999] binder_alloc: 9995: binder_alloc_buf, no vma 09:15:35 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700}) [ 599.239545][T10002] binder: 9995:10002 ioctl c0182101 20000180 returned -22 [ 599.269087][T10026] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:35 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) 09:15:35 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x2, {0x0, 0x8}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000080), 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000000)={0x0, 0x7}, 0x2) 09:15:35 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) [ 599.400519][T10041] binder: BINDER_SET_CONTEXT_MGR already set [ 599.426180][T10041] binder: 10004:10041 ioctl 40046207 0 returned -16 [ 599.437894][T10008] binder: 10004:10008 unknown command 1074029544 [ 599.456613][T10008] binder: 10004:10008 ioctl c0306201 20000280 returned -22 [ 599.469103][T10015] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.502121][T10047] binder_alloc: 10039: binder_alloc_buf, no vma [ 599.554754][T10049] binder: BINDER_SET_CONTEXT_MGR already set [ 599.557000][T10050] binder_alloc: 10042: binder_alloc_buf, no vma [ 599.581490][T10049] binder: 10044:10049 ioctl 40046207 0 returned -16 09:15:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x50, r1, 0xc07db000) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0xe, 0x0, 0xc, 0xa00000, 0xffffffff, 0x20000, 0x5, 0xbd}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x7}) 09:15:35 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff00}) 09:15:35 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) [ 599.722342][T10054] binder: BINDER_SET_CONTEXT_MGR already set [ 599.745488][T10054] binder: 10052:10054 ioctl 40046207 0 returned -16 09:15:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000000}) [ 599.792788][T10054] binder: BINDER_SET_CONTEXT_MGR already set [ 599.809475][T10054] binder: 10052:10054 ioctl 40046207 0 returned -16 [ 599.844306][T10060] binder: BINDER_SET_CONTEXT_MGR already set [ 599.876227][T10060] binder: 10056:10060 ioctl 40046207 0 returned -16 09:15:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:36 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) 09:15:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000000}) 09:15:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) [ 600.094393][T10068] binder: BINDER_SET_CONTEXT_MGR already set [ 600.117254][T10068] binder: 10067:10068 ioctl 40046207 0 returned -16 [ 600.199533][T10043] binder: 10039:10043 ioctl 8912 400200 returned -22 [ 600.212619][T10047] binder_alloc: 10039: binder_alloc_buf, no vma 09:15:36 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 09:15:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3000000}) [ 600.267614][T10050] binder_alloc: 10042: binder_alloc_buf, no vma 09:15:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xc5, 0x1}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000240)={{0x1, 0x0, @identifier="94f5c20e80cc17a84f9f6ecf74a04fde"}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) [ 600.372763][T10079] binder: BINDER_SET_CONTEXT_MGR already set [ 600.403255][T10079] binder: 10078:10079 ioctl 40046207 0 returned -16 09:15:36 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="02006800000ffffffff60005000000e08128b14700000000d59863d20000040002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}, {&(0x7f0000000000)="ff726a72924b37e1bf1aa7da87a51d080245b6d1fc", 0x15, 0x1}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 09:15:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) prctl$PR_GET_TIMERSLACK(0x1e) 09:15:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000000}) 09:15:36 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) [ 600.564561][T10088] binder_alloc: 10082: binder_alloc_buf, no vma 09:15:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x100000003, 0x2c) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0563044000009d05a68a1900000000dadb00b0b72eb94001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x40000000, 0x2, {r4, r5/1000+60000}, {0x4, 0x0, 0x4, 0x80, 0x8, 0x3, "6b7f556e"}, 0x3f, 0x3, @offset=0x1, 0x40, 0x0, 0xffffffffffffffff}) recvmsg$can_j1939(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1, &(0x7f0000000200)=""/62, 0x3e}, 0x120) r7 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r7, 0x1000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x806, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3, @local, 0xaa}, 0x20) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 600.619394][T10089] loop4: [ 600.622797][T10089] loop4: partition table partially beyond EOD, truncated 09:15:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5000000}) [ 600.717679][T10100] binder: BINDER_SET_CONTEXT_MGR already set [ 600.728976][T10089] binder: 10087:10089 ioctl ae01 0 returned -22 [ 600.740136][T10100] binder: 10095:10100 ioctl 40046207 0 returned -16 09:15:37 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) 09:15:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6000000}) [ 600.989565][T10111] binder: BINDER_SET_CONTEXT_MGR already set [ 601.017640][T10111] binder: 10108:10111 ioctl 40046207 0 returned -16 09:15:37 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) 09:15:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7000000}) [ 601.237718][T10117] binder: BINDER_SET_CONTEXT_MGR already set [ 601.262996][T10117] binder: 10116:10117 ioctl 40046207 0 returned -16 [ 601.329876][T10085] binder_alloc: 10082: binder_alloc_buf, no vma 09:15:37 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 09:15:37 executing program 0: mincore(&(0x7f0000fea000/0x14000)=nil, 0x14000, &(0x7f00000003c0)=""/4096) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x0, 0x5}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 601.409451][T10089] loop4: [ 601.412685][T10089] loop4: partition table partially beyond EOD, truncated [ 601.422421][T10124] binder: 10087:10124 ioctl ae01 0 returned -22 09:15:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8000000}) [ 601.555287][T10128] binder: BINDER_SET_CONTEXT_MGR already set 09:15:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b6700008a8714837066d59966e6713c299e1c9cd57a2fb6e7c252c0b481009a6914"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f5108c793657080066ff0f40d8ef679d6339fd8fac42f8116b2555fe35d44e14234fc977f4d7d875340328e73bab4e07ca6638b048115c3c458389245e88748b51a6c863632293e8f43211c46885"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3}], 0x0, 0x2, 0x0}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/46) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @none, 0x6}, 0xa) [ 601.600489][T10128] binder: 10126:10128 ioctl 40046207 0 returned -16 [ 601.617165][ T27] audit: type=1800 audit(1588238137.806:15): pid=10132 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=15736 res=0 09:15:37 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 601.675605][T10139] binder_alloc: 10130: binder_alloc_buf, no vma [ 601.711107][T10139] binder: 10130:10139 ioctl 4008af13 20000000 returned -22 09:15:37 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0xfffffffe, 0x31, 0x4, 0x0, 0x400, 0x0, 0x0, 0x1ff}) 09:15:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfdfdffff}) [ 601.768811][T10140] binder: 10138:10140 unknown command 1717991472 [ 601.775267][T10140] binder: 10138:10140 ioctl c0306201 20000200 returned -22 [ 601.825066][T10140] binder: 10138:10140 unknown command 26379 [ 601.847513][T10140] binder: 10138:10140 ioctl c0306201 200000c0 returned -22 [ 601.874139][T10146] binder: BINDER_SET_CONTEXT_MGR already set 09:15:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff000000}) [ 601.898215][T10145] binder: 10138:10145 unknown command 1717991472 [ 601.907147][T10146] binder: 10141:10146 ioctl 40046207 0 returned -16 [ 601.913508][T10145] binder: 10138:10145 ioctl c0306201 20000200 returned -22 [ 601.915913][T10140] binder: 10138:10140 unknown command 26379 09:15:38 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x408a00, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 601.942751][T10140] binder: 10138:10140 ioctl c0306201 200000c0 returned -22 09:15:38 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 09:15:38 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x1) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffdfd}) 09:15:38 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x101, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x2, 0x0}) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$NBD_CLEAR_QUE(r5, 0xab05) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 602.152302][T10159] binder: BINDER_SET_CONTEXT_MGR already set [ 602.188792][T10159] binder: 10155:10159 ioctl 40046207 0 returned -16 [ 602.251220][T10164] binder_alloc: 10158: binder_alloc_buf, no vma [ 602.284264][T10165] binder: BINDER_SET_CONTEXT_MGR already set [ 602.306343][T10165] binder: 10163:10165 ioctl 40046207 0 returned -16 [ 602.341130][T10169] binder: BINDER_SET_CONTEXT_MGR already set [ 602.354428][T10169] binder: 10163:10169 ioctl 40046207 0 returned -16 [ 602.436627][T10135] binder: BINDER_SET_CONTEXT_MGR already set [ 602.448830][T10135] binder: 10130:10135 ioctl 40046207 0 returned -16 [ 602.465222][T10173] binder: 10130:10173 ioctl 4008af13 20000000 returned -22 09:15:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x8000) pwrite64(r2, &(0x7f00000002c0)="7b81bfdd9d0f403bd365713961738bae4d702e8de72377b757c431029e373fb81433fd821fb02a55c01bbffeb02a73da3c8efa3e75831afb937227cf0024befbb14c02ca5304f5ef23eb0db9fbb73e8336a0238034e69b67abd7c419f57a0767c269cefe65254fd0ea04eb2271ef4c85b9ee1cf198", 0x75, 0x2) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b7f0000"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="8888e4676f128db6613a83ad905311460d65f56c2b70724f62898877ce625898838d8b068e10952eb54d3ebe1d9bb37752a92342f26cc013e1c1bf67e3b4f65ad44f3d9c46d54e14a600c1ccdbe29901c1ea16043b82232c1f93007a95b695a189ccfa3302ead1912da52e93ff9107d5df09865f523e68d9970e8a3961f936930929eecddad8821759c080cd9ce4c0eb85e00adf71e6b3a2e2106c23ebcdbfb7f7d730fc016c804b9a91ba661483812ae6338ba83845110601afb16991fb0a1f77bdb634a35c302558f217c1b636c1b649eb59361bdc9f3d0a3e23564342aca8f9df08ae"], 0x0, 0x2, 0x0}) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000000)) 09:15:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:15:38 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 09:15:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x6f8a83, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x2880) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001100)={0x1, 0x0, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=""/1, &(0x7f0000000100)=""/4096, 0x10000}) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001280)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000012c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, r5, 0x10, 0x1, @ib={0x1b, 0x8, 0x7, {"ed53f23d2e4d93de580a4f7ad4da939c"}, 0x0, 0xecd, 0x2fb0000000000000}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000001240)={0x11, 0x10, 0xfa00, {&(0x7f0000001200), r6}}, 0x18) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000011c0)=0x2, 0x4) fsetxattr$security_capability(r1, &(0x7f0000001140)='security.capability\x00', &(0x7f0000001180)=@v2={0x2000000, [{0xa51, 0x3}, {0x38fe, 0x1}]}, 0x14, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001300)={0x0}, &(0x7f0000001340)=0xc) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001380)='/dev/nvram\x00', 0x515841, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, r0, &(0x7f00000013c0)={r2, r8, 0x74f4}) 09:15:38 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0xffffffff, 0x0, 0x3}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x7c, 0x0, &(0x7f0000002800)=ANY=[@ANYRESOCT=r3, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYBLOB="f587eb3613e24dff63cbeb805c06281e79882afc4f272baa79d87a0af8bbe37038c8602f82c94edc2572", @ANYPTR, @ANYRESOCT], @ANYPTR, @ANYRESOCT, @ANYRESOCT], @ANYRESHEX, @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYBLOB="c6", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r5, @ANYRES64, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64]], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX, @ANYPTR64, @ANYRESDEC], @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC, @ANYRES16], @ANYRESOCT, @ANYRESDEC, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRES64=0x0, @ANYBLOB="d12bc0de589e3d415bf6106cd829661d8f98d1d6c9bab945"], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[], @ANYRES16, @ANYRESOCT, @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYRESOCT=r0]], @ANYRES64], 0x0, 0x0, 0x0}) r6 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2e, 0x2f, 0x3, 0x16, 0x1, 0x6, 0x5, 0x2c, 0x1}}) [ 602.600676][T10181] dlm: non-version read from control device 58 [ 602.609895][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 602.637157][T10184] binder: 10179:10184 unknown command 32523 09:15:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2}) [ 602.646278][T10181] dlm: non-version read from control device 58 [ 602.647788][T10180] binder: 10177:10180 ioctl 40046207 0 returned -16 [ 602.662623][T10187] binder: BINDER_SET_CONTEXT_MGR already set [ 602.671102][T10184] binder: 10179:10184 ioctl c0306201 200000c0 returned -22 [ 602.680089][T10187] binder: 10177:10187 ioctl 40046207 0 returned -16 09:15:38 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x5a7bc3, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1b2, 0x163002) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) [ 602.713316][T10184] binder_alloc: 10179: binder_alloc_buf, no vma [ 602.716274][T10192] binder: BINDER_SET_CONTEXT_MGR already set [ 602.741779][T10192] binder: 10177:10192 ioctl 40046207 0 returned -16 [ 602.754836][T10184] binder: 10179:10184 ioctl 80247009 20000000 returned -22 [ 602.797059][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 602.811703][T10192] binder: BINDER_SET_CONTEXT_MGR already set [ 602.814809][T10191] binder: 10179:10191 unknown command 32523 [ 602.817959][T10180] binder: 10177:10180 ioctl 40046207 0 returned -16 [ 602.824051][T10197] binder: BINDER_SET_CONTEXT_MGR already set [ 602.834576][T10192] binder: 10177:10192 ioctl 40046207 0 returned -16 09:15:39 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 602.860227][T10191] binder: 10179:10191 ioctl c0306201 200000c0 returned -22 [ 602.860898][T10198] binder: BINDER_SET_CONTEXT_MGR already set [ 602.874287][T10197] binder: 10179:10197 ioctl 40046207 0 returned -16 [ 602.894718][T10198] binder: 10177:10198 ioctl 40046207 0 returned -16 [ 602.908282][T10187] binder: BINDER_SET_CONTEXT_MGR already set [ 602.929152][T10187] binder: 10177:10187 ioctl 40046207 0 returned -16 [ 602.975266][T10161] binder: BINDER_SET_CONTEXT_MGR already set [ 603.018567][T10161] binder: 10158:10161 ioctl 40046207 0 returned -16 09:15:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x541602, 0x0) read$usbmon(r1, &(0x7f0000000080)=""/227, 0xe3) 09:15:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3}) 09:15:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x3ff, 0x0, 0xfffffffd}) 09:15:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffffffff4f8563a2f6e3b120c7615572de674d04f3c08b2f7548207514d40429aebec74b70d7879f36a33246143f5c78b51bbee17756167296b80dadfe478313526e771bf4f92795346fae1f1e3a059a0d8e01801eab22329c80cc07daa7dd5115e9086d3d094752d7e72cdd502504ffaf84bd879476343569001034707545ad0709e801445a4bb4326d451a72657c44a5bd17cc4273107882c8858d5717dd43385a321e6e52a7558aa5538924a4d8d0aaea142daf6b8bd1b6"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'veth0_vlan\x00', {}, 0x8001}) 09:15:39 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04635fa05a6a85eafea05a05aae9ff17900440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={r6, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x5, 0x9, [0x7, 0xf73c, 0x81, 0x664, 0x7f, 0x8000, 0x4, 0x2, 0x81]}, &(0x7f0000000100)=0x1a) 09:15:39 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 603.180740][T10214] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 603.202079][T10215] binder: BINDER_SET_CONTEXT_MGR already set [ 603.208107][T10215] binder: 10209:10215 ioctl 40046207 0 returned -16 09:15:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4}) 09:15:39 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 603.236485][T10214] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2010000, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x7ff}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0xda3}}, {@mode={'mode', 0x3d, 0x40}}, {@mode={'mode', 0x3d, 0x4}}], [{@fowner_lt={'fowner<', r1}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x33}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 603.288883][T10221] binder: BINDER_SET_CONTEXT_MGR already set [ 603.319557][T10221] binder: 10209:10221 ioctl 40046207 0 returned -16 [ 603.336361][T10215] binder: BINDER_SET_CONTEXT_MGR already set [ 603.342880][T10215] binder: 10209:10215 ioctl 40046207 0 returned -16 09:15:39 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4801, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e00fff5dcff00"/36], 0x3c}}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4c810) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', r6}) 09:15:39 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5}) [ 603.488751][T10219] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 603.522399][T10219] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6}) 09:15:39 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x84880, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 603.719901][T10230] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 603.751581][T10230] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:40 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7}) 09:15:40 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x343881, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) [ 603.949805][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 603.973405][T10230] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 604.005794][T10230] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:40 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 604.136150][T10258] binder_alloc: 10254: binder_alloc_buf, no vma [ 604.173909][T10258] binder: 10254:10258 ioctl 545d 0 returned -22 09:15:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 604.250307][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 09:15:40 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200f02, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x40, 0x1, 0x5}}, 0x14) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40247007, &(0x7f0000000380)) 09:15:40 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x300}) [ 604.411969][T10267] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}) [ 604.492336][T10267] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:40 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x500}) 09:15:40 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x800, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)) [ 604.674286][T10280] binder_alloc: 10273: binder_alloc_buf, no vma [ 604.691105][T10269] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 604.720966][T10269] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 604.738695][T10280] binder: 10273:10280 ioctl 4c80 0 returned -22 09:15:41 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 604.861004][T10258] binder_alloc: 10254: binder_alloc_buf, no vma [ 604.891610][T10258] binder: 10254:10258 ioctl 545d 0 returned -22 09:15:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x90000, 0x0) r1 = socket$kcm(0x2b, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x81) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ddc716f8f502"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x600}) 09:15:41 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)) 09:15:41 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:15:41 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR64]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x700}) 09:15:41 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) [ 605.181353][T10298] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 605.238574][T10302] binder: 10292:10302 unknown command 536871552 [ 605.259918][T10298] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 605.278818][T10302] binder: 10292:10302 ioctl c0306201 20000240 returned -22 [ 605.388126][T10277] binder: 10273:10277 ioctl 4c80 0 returned -22 09:15:41 executing program 4: r0 = epoll_create(0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8010, r0, 0xa8601000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xff00}) 09:15:41 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) [ 605.482210][T10298] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 605.547683][T10298] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:15:41 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x1, 0x0, &(0x7f0000000240)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r6, 0x7}, &(0x7f0000000080)=0x8) [ 605.749661][T10320] binder: BINDER_SET_CONTEXT_MGR already set [ 605.763745][T10320] binder: 10318:10320 ioctl 40046207 0 returned -16 09:15:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x628302, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:15:42 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200400, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x200000, 0x8, 0xfffffffe}) 09:15:42 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 605.838881][T10325] binder: BINDER_SET_CONTEXT_MGR already set [ 605.860400][T10325] binder: 10318:10325 ioctl 40046207 0 returned -16 [ 605.987581][T10303] binder: 10292:10303 unknown command 536871552 [ 605.996386][T10303] binder: 10292:10303 ioctl c0306201 20000240 returned -22 09:15:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b40000000a0601042cbd7000fddbdf25050000061845eb33cb0dbc15692c1759117c72b87351164604b59b93428223a4032218c0aacca94bd201aa751748d736b5c89f019c81ed331f54089fb9de2ae35e7f60b3771e147e149ebefde0c32ca561b7fbc09297d6c3f57b867e0c00550007000000000000003f7d421ce9993e07c9e04bacf9850ff6083cea5f623df4946017033fb5e91c988e1d3ae99aeb68b03bd96853176155386b850c9a5c664bdbb11f5474"], 0xb4}, 0x1, 0x0, 0x0, 0x40008}, 0x800) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x203, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa0080801}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newrule={0x3c, 0x20, 0x200, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x80, 0x40, 0x81, 0x0, 0x0, 0x6, 0xb}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x810) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x7, 0xffff, 0x1, 0x2f5b, 0x8, "3354b596c3278dae"}) 09:15:42 executing program 4: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:15:42 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3000000}) 09:15:42 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="c1e8a77fdea653822366c7eb317887498ff35c76ba603aa4a62f883dc0e6a9126d38c21bf51ec76f96861369abe0ed7d5d5178918ea0ce43c7f97c2acc4a2d46f9f2c7a579f1854902c0a5ec8bf1f5ad25b59db2203f4f08bbfc4e32771b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/199, 0xc7, 0x2, 0x1f}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_buf(r0, 0x0, 0xd3faff01b160fa75, &(0x7f00000003c0)="4e09565591a7eddbf6c88b0dec0ebfe28485248d0d9eb3ee1cec032cd317360273635ceeeb86a374596cb2ddaa9e168d78bc33b85e67cfa098dc805f502d73824d893fc17f3fe7d3029ca94077e62dd0146b5be7e101f76394980448938813ded1c9fe4c7e0cfb7bb9bdd7db914cf51f8280e1797491e65f826f79567b200cfcda8eee1f294818bbdbd031d6cb72165e68fe5d8845c21b4e6167e61a6eccc600a7e808863e68ec4cb0d01eac5d3f235f33214ace930b14d76384ff279ae38edbc04c54e4f3d927cb8ab9e7f4f56fc5d5ceb652c901a0f762f5cec94740d7873e608436d7e9f20afc74d70c22d7da168f", 0xf0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="acd651c9db79a82ebddde7f5293666b1dc"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000380)={0xfffffffd, 0x0, 0x0, 0xa, 0x8, 0xc5}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x780) [ 606.224662][T10344] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 606.252884][T10346] binder: 10337:10346 unknown command -917383508 09:15:42 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) 09:15:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) [ 606.270791][T10346] binder: 10337:10346 ioctl c0306201 20000280 returned -22 [ 606.286683][T10344] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 606.316885][T10348] binder: 10337:10348 ioctl 4024700a 20000380 returned -22 [ 606.542542][T10320] binder: BINDER_SET_CONTEXT_MGR already set [ 606.550848][T10320] binder: 10318:10320 ioctl 40046207 0 returned -16 [ 606.552986][T10347] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 606.559406][T10356] binder: BINDER_SET_CONTEXT_MGR already set [ 606.575247][T10356] binder: 10318:10356 ioctl 40046207 0 returned -16 09:15:42 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, 0x1000}) 09:15:42 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4000000}) 09:15:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x7002, &(0x7f0000000000)={0x0, 0x0, 0x15, 0x8}) [ 606.598360][T10347] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) [ 606.800144][T10362] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 606.822744][T10362] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 606.952437][T10346] binder: 10337:10346 unknown command -917383508 [ 606.962789][T10346] binder: 10337:10346 ioctl c0306201 20000280 returned -22 [ 606.977971][T10346] binder: 10337:10346 ioctl 4024700a 20000380 returned -22 [ 607.098706][T10344] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 607.133771][T10344] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 607.303441][T10347] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 607.314937][T10347] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:43 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9}) 09:15:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5000000}) 09:15:43 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:43 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0xf, 0xe, 0x808, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f00000004c0)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="056304400000000000634040019747eaa98f31c303f85822e1984873580f609c96b6dd9052876df08ed4278d6b2397eaddb0d83d9cd8de5b8f5307567c8c987f47e0facc091e642292ad1b7b673494c5d5703eea50fadc48038dc19f234f0a8618f4c13415e957aa43d0907b68fef81572156cf49018ca5a847c2fdc41e5b6b91a7e9e52f86b709698c188cb1244aabe35bf8e151b1018d38d6802b8f6a9b44a78758c083ea410721b05367adecca0b4ee295027d75c6f7a0226978bb737cb95e400"/209], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat, @fda={0x66646185, 0x4, 0x0, 0x2a}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000000400)={0x0, &(0x7f00000003c0)=[&(0x7f0000000080)="b0823b37086fa61cb6dc41260f8f37a04902a6e7c0d7e4fa3e31e3ed264d36fc2688cd197fbd064585517ea4f74605ea042560003a10943420b95aa101934085150156e592f8485a552878abc335dfe73c0ce332a99ce6d54683698e64", &(0x7f0000000000)="03fa92d1e0a7f8d041789375780d95016c87173beab096d6a4be4b2019112c46c4cd49", &(0x7f0000000100)="31dd430072d17a1f626061ea454f9ca4dd1b147e87e268477c689dacd0294fe02f4057ca5013ac4b5cc1510694578a7436f88dae35a40b33bc8248cbe21d9fe0cffc435828e0c0e718cee2a12b57a9e0ef195ebd31b6c00bedf178e35edb479fede9fff4dcc078efed24409c92f686f95162814c6fe3b187123876ae8b434936cd5bd9ff1eee86306d17db7a18038f2a", &(0x7f00000001c0)="6c9d3ddf8052e803e45f9f5006da90a0436c190a0647a9e1f6e84bb136adc210e7ee9052eb1c17424ca6b2fd96357a2f8ca8423d592d0e17506580e8b771b029fd885aa6108e3bf6f11d83ab58c824989f723210", &(0x7f0000000240)="3b05e4658b68962ae88f9d7fcf8639c4f0f9a2376e59a0e5c9ad09f3d76fac32be03c4b1fb753a52f05335df922e2fe8ace621bd9ea7e959d75652873b5a9b5766998fef", &(0x7f00000002c0)="527ecf32b0a0be218e04d42e22f6925df9ab889a394b2fed2222d267f31f09a3057142eb43446f2b1ef9557fce3ee922fc57ea386d71c1b37a0733d10e3854469359fd1f4a88f8", &(0x7f0000000340)="a2735414ab96e8dc9e93cb4996396e27c8e69ad37a8e72415146eff868861832"], 0x57}) [ 607.495952][T10362] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 607.507566][T10362] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:43 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000140)=0x1f8, 0x4) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r2}}}, 0x78) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x4) setfsgid(r2) 09:15:43 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000080)=""/228) 09:15:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6000000}) 09:15:43 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) [ 607.661658][T10385] binder: 10377:10385 ioctl 40184152 20000400 returned -22 09:15:43 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x0, 0x4}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 607.748380][T10384] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 607.762504][T10388] binder: BINDER_SET_CONTEXT_MGR already set [ 607.775125][T10388] binder: 10387:10388 ioctl 40046207 0 returned -16 [ 607.782816][T10384] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:44 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 607.851528][T10397] binder: BINDER_SET_CONTEXT_MGR already set [ 607.873075][T10397] binder: 10387:10397 ioctl 40046207 0 returned -16 [ 607.898666][T10397] binder: 10387:10397 ioctl 8040451b 20000080 returned -22 09:15:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:44 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 607.982820][T10402] binder_alloc: 10396: binder_alloc_buf, no vma [ 608.016416][T10402] binder: 10396:10402 ioctl 80085504 20000000 returned -22 09:15:44 executing program 2: ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)) [ 608.044870][T10384] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 608.064886][T10384] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:44 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:15:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x20, &(0x7f00000000c0)=0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x20002, 0x0) 09:15:44 executing program 2: ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)) [ 608.515624][T10388] binder: BINDER_SET_CONTEXT_MGR already set [ 608.525736][T10388] binder: 10387:10388 ioctl 40046207 0 returned -16 [ 608.530069][T10424] binder: BINDER_SET_CONTEXT_MGR already set [ 608.547320][T10424] binder: 10387:10424 ioctl 40046207 0 returned -16 09:15:44 executing program 5: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)) 09:15:44 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xff000000}) 09:15:44 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") 09:15:44 executing program 2: ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)) [ 608.598426][T10428] binder_alloc: 10422: binder_alloc_buf, no vma [ 608.700607][T10400] binder: BINDER_SET_CONTEXT_MGR already set [ 608.714444][T10400] binder: 10396:10400 ioctl 40046207 0 returned -16 09:15:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) fanotify_init(0x20, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x40010, r3, 0x6) r4 = socket$inet6(0xa, 0x2, 0x4) write$binfmt_aout(r4, &(0x7f0000000700)={{0xcc, 0x5, 0xdb, 0xa8, 0x4, 0x0, 0x3d6, 0x81}, "9d65a81168d42c44255cbbc15b96735e34f14f73b20015cb4f984d0604046a7321725d5e51583cb92ac3f8f365452817278ac15aa62a433ac742ab85b977bec028224a55ad80e39a491ea343a81c5886f41002572db523934b0abf2a46bf87303e43120249e71cd3c3a984f822797627ae9c0a64dbacb2a02bdc73b6812d5bd9c3e71f5dc58cda1608fb6211b953eed2cb55ceaa71ee5f16570f74ee51fb43b90ec2bc84a0e06d104a8d5d85038740d650d6", [[], [], [], []]}, 0x4d2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r6 = dup(r5) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000240)={0xe657, 0xd, [{0xe, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {0xf}, {0x8, 0x1}, {0xf}, {0x5}, {0x2}, {0xc, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}]}) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x5c5c00, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x2d43b8b3, 0x7fffffff, 0x200, 0x1, 0x7, 0x6, 0xcc}) 09:15:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:15:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:45 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2500, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x5, {0x4, 0x5, 0x9, 0x2}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x7001, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xff, 0x400) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000080)) 09:15:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) [ 609.085229][T10454] binder_alloc: 10447: binder_alloc_buf, no vma [ 609.153472][T10459] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 609.171494][T10459] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:45 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x8}, 0xc) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x37, 0x0, 0xa}) 09:15:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:45 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) signalfd(r1, &(0x7f0000000000)={[0xe8b]}, 0x8) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 609.316420][T10428] binder_alloc: 10422: binder_alloc_buf, no vma 09:15:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 609.410286][T10468] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 609.433293][T10468] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:15:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440000000000063404001baacfd"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7, 0x7, 0x800, 0xff, 0x9}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000880)={r5, @in6={{0xa, 0x4e22, 0x81, @local, 0x40}}, 0x446, 0x100, 0x1, 0x8, 0x8, 0x10001, 0x7f}, 0x9c) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)={0x4, 0x3, 0x4, 0x4080000, 0x401, {0x0, 0xea60}, {0x1, 0x0, 0x2, 0x1, 0x5, 0x0, "978ad076"}, 0x10000, 0x1, @offset=0x2, 0x2f, 0x0, r0}) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x4bc, 0x0, 0x5, 0x1002, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x1}, 0x9, 0x4c, 0xfffb, 0x4, 0x2, 'syz1\x00', "87313744b5e09438128afe3b258bf5260229f1a428e671cfaecdce0cbfc057ae", "23d90017f5aa16c02ab75b05a29d117f1a02e8a7a9a888b53b2238657d03134f", [{0x5, 0x0, {0x0, 0x100}}, {0x3, 0xd80c, {0x0, 0x264}}, {0x1, 0xde, {0x3, 0x7}}, {0x6, 0x80, {0x0, 0x800}}, {0x0, 0x2, {0x0, 0x18}}, {0x0, 0x2, {0x2, 0x2}}, {0x9, 0x7f, {0x0, 0x5}}, {0xffff, 0x4, {0x2, 0x3}}, {0x8, 0x0, {0x2, 0x4}}, {0x81, 0x6, {0x2, 0x3}}, {0x7f, 0xfff, {0x2, 0x3}}, {0xf544, 0x2, {0x0, 0x5abe}}, {0x1, 0xffff}, {0x3f, 0x5, {0x2, 0x800}}, {0x0, 0x6, {0x1, 0x6}}, {0x7, 0x6, {0x1, 0xffffff7f}}, {0x9, 0x6, {0x3, 0xfffffffa}}, {0x3d28, 0x3, {0x0, 0x5}}, {0x20, 0x5, {0x2, 0x2}}, {0xff, 0x5, {0x2, 0x401}}, {0x4, 0x9, {0x3, 0x101}}, {0x7, 0x1, {0x2, 0x81}}, {0xa3, 0x7fff, {0x0, 0x9}}, {0x26, 0xfffc, {0x3, 0xfffffff7}}, {0x1f, 0x0, {0x2, 0x9}}, {0xf0, 0x2449, {0x2, 0x7}}, {0x5, 0x8, {0x1, 0x8fe}}, {0x0, 0x9, {0x3, 0xde}}, {0x7d85, 0x0, {0x3, 0x80000001}}, {0x1, 0x0, {0x0, 0x2}}, {0x315, 0xe6ba, {0x0, 0x2}}, {0xffff, 0xc0de, {0x2, 0xffffff90}}, {0x5, 0x1000, {0x3, 0x8001}}, {0x5, 0x961, {0x3, 0x32fc}}, {0x1, 0x0, {0x3, 0x2}}, {0x5, 0x8, {0x0, 0x8}}, {0x0, 0x3, {0x3, 0x40}}, {0x950, 0x100, {0x2, 0x3}}, {0xd2, 0x68b, {0x2, 0x4}}, {0x4, 0x8001, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x3, 0x6, 0x6, 0x8, 0x19, 'syz1\x00', "010abef918d92b447d54a8150d5e42e410e7c6f005f1b9a23656fdf095778d38", "049d38d98df8f2a463207eb5b1c7f7c44a71235ea0362619ba55c91e20b8f973", [{0x12e, 0x1f, {0x3, 0x10000}}, {0xec, 0x3f, {0x1, 0x5}}, {0x0, 0x3ff, {0x0, 0x2}}, {0x0, 0x5a5, {0x3, 0x7f}}, {0xce46, 0x5, {0x1, 0x9}}, {0x7, 0x0, {0x2, 0x7ff}}, {0x5, 0x3, {0x3, 0x8}}, {0x7, 0x200, {0x3, 0x7}}, {0x98, 0x2, {0x0, 0x7ff}}, {0x68, 0x6, {0x1, 0x7fffffff}}, {0x200, 0x4, {0x0, 0x7fffffff}}, {0x0, 0x7fff, {0x0, 0x81}}, {0x6, 0xff, {0x1, 0x6}}, {0x8, 0x7fff, {0x3, 0x4}}, {0x3, 0x400, {0x3, 0xff}}, {0x3, 0x730, {0x2, 0x267}}, {0x8, 0x0, {0x0, 0x7}}, {0x6e9, 0xda, {0x1, 0x80}}, {0x3, 0x5, {0x2, 0x7f}}, {0x8001, 0x3de9, {0x1, 0x8}}, {0x8000, 0x100, {0x2, 0x4}}, {0xfa88, 0x3, {0x1, 0x2}}, {0x8001, 0xff, {0x1, 0x10001}}, {0x6, 0x4b, {0x3, 0xfffffff7}}, {0x401, 0x7, {0x1, 0x2}}, {0x200, 0x2, {0x2, 0x1000}}, {0xffff, 0x514, {0x1, 0x81}}, {0x2, 0xfff, {0x3, 0x8}}, {0x3, 0x6, {0x1, 0x6}}, {0x7fff, 0x81, {0x0, 0x3}}, {0x4, 0xd7b, {0x0, 0xffffffff}}, {0x0, 0x401, {0x1, 0x5}}, {0x0, 0x5, {0x1, 0xb46}}, {0x6c, 0x5, {0x3, 0x6}}, {0x9, 0x3}, {0x1ff, 0x98a, {0x1, 0x4}}, {0x7, 0x400, {0x0, 0x4}}, {0x100, 0x200, {0x3, 0x8000}}, {0x100, 0x6, {0x0, 0x2}}, {0xfc, 0x4, {0x2, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040894) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) [ 609.590818][T10478] binder: BINDER_SET_CONTEXT_MGR already set [ 609.597236][T10478] binder: 10476:10478 ioctl 40046207 0 returned -16 [ 609.663147][T10479] binder: BINDER_SET_CONTEXT_MGR already set [ 609.689564][T10479] binder: 10476:10479 ioctl 40046207 0 returned -16 [ 609.719044][T10479] binder: 10476:10479 ioctl c058565d 20000080 returned -22 [ 609.843318][T10451] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 609.883587][T10451] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:46 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0x6}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 09:15:46 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 09:15:46 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x420680, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x8001]}, 0x8) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:15:46 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)) 09:15:46 executing program 0: prctl$PR_GET_DUMPABLE(0x3) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x317440, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x8, 0x0, 0xc5, 0x0, 0xfb}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001780)=""/4096, 0x0, 0x0, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000240)="90d12d2279c4ffd57c7c2f54749dfa5d53fe8c5db2797af3f05726e3d5961d849e5ea2dda5d121dacfa36b674a845040f6cc5ebbd36f4608355c14b182105408d57659bd61f76a522f20db86b581cb84acd733a61388acc3f2fe9cf95be3379757", 0x61}], 0x1, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a62fbbe12482c13687ea95f50eb59583e45291a4e2c0915e453ff41f75db099cd1a0b06c9e228cc51ddc64af21f7124ed43fa745ba7c8a9df8557af8ea2db94be467f196af13b8f83b01ecc5879016f45042a666323d600d2e17cbc600ed1b4386a3454104d88d1fed55563324ac778b32ab6f16fc188528336da48465aea99dca79a839f71ae9b67b720e575640328fc8835b9d2e16f8cc30ba4fe485cb7ed2a85278e7eacaa69ce143893c2a769e6844e37220f2134c094469862595b3d15f1c5320d59a7dad8da4a4978ff7524d7a6f5e9150aec724929601708d93a86d"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="ea6204409e3100000000806340bf3896b31759b5c2de60546bcee8e048093bbe47cad74c67c6c87cbef8a58673cbc38c24e86acb7cbf9598491328084b7703e1db092154b341cad1aa69fa35f92c5a21db009a36d84f951cfa1a7b4a699fbad1d6f37d4c40fe6676a06078ce42ea9ac5f8b028c527e35b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) 09:15:46 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 09:15:46 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)) 09:15:46 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x13, 0x3b, 0x12, 0x5, 0x0, 0x7f, 0x1, 0x3e, 0x1}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 610.388862][T10478] binder: BINDER_SET_CONTEXT_MGR already set [ 610.399614][T10478] binder: 10476:10478 ioctl 40046207 0 returned -16 [ 610.410061][T10479] binder: 10476:10479 ioctl c058565d 20000080 returned -22 09:15:46 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)) 09:15:46 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x13}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="99d84f7e004c7e40f2be30121082b954417194522ce7311ea96a8864d2f3f4d720af83b612b179b2f806e63313a772f7c10618ded0877d2fafddb0feba3332d125feca4577e4dc2c0a3b72d998360a128335c5689719fe023573b94c5008ddecf5bb3da02e4710a680de490eedc9c99af7dd9c07ee1ff27bd95290b2eaf151bf3db6129626cc28d5196b03e2c76ed9ebf84a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000000000000001c40000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r6}}}, 0x78) r7 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r8}}}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x5, 0x926, [0x200003c0, 0x0, 0x0, 0x20000546, 0x20000854], 0x0, &(0x7f00000000c0), &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="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"]}, 0x9ac) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x1) 09:15:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x33, 0x1c, 0x1, 0x18, 0x1, 0x8001, 0x4, 0x83}}) 09:15:46 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 09:15:46 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:46 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) [ 610.679931][T10517] binder: BINDER_SET_CONTEXT_MGR already set [ 610.738052][T10517] binder: 10512:10517 ioctl 40046207 0 returned -16 [ 610.758818][T10520] binder: BINDER_SET_CONTEXT_MGR already set [ 610.777136][T10520] binder: 10512:10520 ioctl 40046207 0 returned -16 09:15:47 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x301800) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x4d, 0x548b, 0x80, 0x2, 0x16, 0x9}) 09:15:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 09:15:47 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:15:47 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b83000065028b7428c77563f61489acaf869ef97a90c40a9cfea4fa974edcb331034b90fd386ebe54f2006397cd8408dbd0d24694da543b0d9cb727cebf64a687b768bb6f23b6b937e1964c23800230350b8b43bed5ab3ccb006a8ab9"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3f000000ac0be023a66afe420000000063400100"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000002c0)=""/102) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000080)) 09:15:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 09:15:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x129142, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) 09:15:47 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:15:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 09:15:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000001000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000008, 0x41072, r3, 0xc000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0xc, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x5e, 0x20, 0x10e, 0x4, 0x85b6, 0x1000, 0x2, 0xffffffff, r7}, &(0x7f00000002c0)=0x20) fanotify_init(0x10, 0x8000) [ 611.218427][T10545] binder_alloc: 10537: binder_alloc_buf, no vma [ 611.228703][T10545] binder: 10537:10545 ioctl 40206417 20000080 returned -22 [ 611.252668][T10546] binder_alloc: 10533: binder_alloc_buf, no vma [ 611.272620][T10546] binder: 10533:10546 ioctl 806c4120 20000080 returned -22 09:15:47 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 611.382980][T10554] binder: BINDER_SET_CONTEXT_MGR already set [ 611.395635][T10554] binder: 10551:10554 ioctl 40046207 0 returned -16 [ 611.419388][T10556] binder_alloc: 10550: binder_alloc_buf, no vma 09:15:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 611.430475][T10556] binder: 10550:10556 ioctl 800442d2 20000000 returned -22 [ 611.438124][T10554] binder: BINDER_SET_CONTEXT_MGR already set [ 611.457732][T10554] binder: 10551:10554 ioctl 40046207 0 returned -16 [ 611.465315][T10554] binder: BINDER_SET_CONTEXT_MGR already set [ 611.477845][T10554] binder: 10551:10554 ioctl 40046207 0 returned -16 [ 611.515242][T10554] binder: BINDER_SET_CONTEXT_MGR already set [ 611.548074][T10554] binder: 10551:10554 ioctl 40046207 0 returned -16 [ 611.554882][T10563] binder: BINDER_SET_CONTEXT_MGR already set [ 611.581840][T10563] binder: 10551:10563 ioctl 40046207 0 returned -16 [ 611.589661][T10562] binder: BINDER_SET_CONTEXT_MGR already set [ 611.623825][T10562] binder: 10551:10562 ioctl 40046207 0 returned -16 [ 611.900676][T10546] binder_alloc: 10533: binder_alloc_buf, no vma [ 611.983266][T10572] binder_alloc: 10537: binder_alloc_buf, no vma [ 611.995031][T10572] binder: 10537:10572 ioctl 40206417 20000080 returned -22 09:15:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 09:15:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x58d) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x3ff, 0x9, 0x1b, 0x15, "c3e0fa3d967b17efcb766b979be9e99d8d86770b4794a19904e29ea6d5f22cae2f94d60fc6751e2669833f8d5f5a32a9d93dcfbe5b5d906638133079b269c4ad", "e2aff511e45ccec1ea865200c34e5c29b4b8a5f524376ee7ce00eeaf70ba7b0f", [0x2, 0x1ff]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltaction={0x2c, 0x31, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x4000050) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/102, 0x66) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) personality(0x400000d) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000480)={0x0, 0x100, 0x5}) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x24a000, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0xe8, 0x7}) 09:15:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x2c801, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x9, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x1, 0xc, 0x2, 0x4, 0xfffffffffffffff4, 0x1}, @jmp={0x5, 0x0, 0x2, 0x8, 0x1, 0xfffffffffffffff4, 0x1}, @generic={0x80, 0x3, 0xc, 0x7ff, 0x1ff000}, @map={0x18, 0x3, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x200}, @map={0x18, 0x1, 0x1, 0x0, r5}], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, r2}, 0x78) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4042, 0x0) ioctl$RTC_SET_TIME(r6, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x12, 0x8}) 09:15:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 612.168637][T10581] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 612.193374][T10583] binder_alloc: 10550: binder_alloc_buf, no vma [ 612.205920][T10581] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 612.235879][T10585] binder: 10550:10585 ioctl 800442d2 20000000 returned -22 [ 612.247249][T10586] binder_alloc: 10577: binder_alloc_buf, no vma 09:15:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 612.282188][T10586] binder: BINDER_SET_CONTEXT_MGR already set [ 612.308434][T10586] binder: 10577:10586 ioctl 40046207 0 returned -16 [ 612.374362][T10581] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 612.436274][T10581] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:48 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:15:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 612.533373][T10597] binder_alloc: 10595: binder_alloc_buf, no vma [ 612.585239][T10597] binder: 10595:10597 ioctl 80047013 20000000 returned -22 09:15:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 09:15:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x13, 0x3b, 0x12, 0x5, 0x0, 0x7f, 0x1, 0x3e, 0x1}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:48 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:15:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x13, 0x3b, 0x12, 0x5, 0x0, 0x7f, 0x1, 0x3e, 0x1}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) [ 612.922292][T10586] binder: BINDER_SET_CONTEXT_MGR already set [ 612.945921][T10586] binder: 10577:10586 ioctl 40046207 0 returned -16 [ 612.948746][T10612] binder: BINDER_SET_CONTEXT_MGR already set 09:15:49 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 612.996777][T10612] binder: 10577:10612 ioctl 40046207 0 returned -16 09:15:49 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x43e741, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000040)={0x8, @capture={0x0, 0x1, {0xfff, 0x2707}, 0x800, 0x45}}) 09:15:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x13, 0x3b, 0x12, 0x5, 0x0, 0x7f, 0x1, 0x3e, 0x1}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:15:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 613.306730][T10601] binder_alloc: 10595: binder_alloc_buf, no vma [ 613.321330][T10601] binder: 10595:10601 ioctl 80047013 20000000 returned -22 [ 613.327191][T10627] binder_alloc: 10621: binder_alloc_buf, no vma [ 613.346702][T10627] binder: 10621:10627 ioctl c0cc5615 20000040 returned -22 09:15:49 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x111001, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xffffffff, 0x4, 0x1}) 09:15:49 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 09:15:49 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)) 09:15:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:15:49 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 09:15:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 09:15:49 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x8, 0x0, 0xc5}) 09:15:50 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:15:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 09:15:50 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b630000eb18835fa3269f031fe17c99e0ea4d4687038340bdd556aadd9d9e4c412ee01d85a4dab8e100785e671f97b5f52cfdd812fcab059209936905b6949f3e8e939abac8f13f7ad47efac8139263f1765abdaf6327b8845229f350a7820824caae021233ecd1c093ea4a08b2fa26087f6cb5ea5440df548d4f0064857a61189fe553f21666a289cfdd96437f71fab56c1dace928201b94ab2d47ec79f6efec83ac31f9713e4fdfceb8ae65b758744bd1ea1ede642b5e47ee77a35b5a17a91a2238a1b517bb5a53ed3fc64173fdef1ae201a2bf5756f59805038b1354636aa2015e03789daa71b8e4887d37a120f6b5033c734a8c75c00460ec48c32a3172afe2d2d0d13682582831788298ebe096ea9e49ec1b2f775ef614b8bcf4755a150d1119fee24e5b051d7301b0c4238cad735464ae4970157897a82c51c30fe2"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x100}, 0x8) 09:15:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 09:15:50 executing program 2: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:15:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000000)={0xc, 0x0, 0xc, 0x8, 0x1, 0x2}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6ba3adc3e2ef00f7bb0cf4abf8fda2e6610e0531df61f0aeea7d55ff5a5c468803b500800000000000007965dc04094827"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000000c0)) 09:15:50 executing program 2: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 614.280478][T10657] binder: 10654:10657 unknown command -1381799058 [ 614.315517][T10657] binder: 10654:10657 ioctl c0306201 200000c0 returned -22 09:15:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 09:15:50 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)) 09:15:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x164, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ad9d062}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdebd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16c6f3c6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc228}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3fc99d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8a1bf1d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab5be9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fac60e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c846563}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa56d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x638a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a6f69e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x269d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eb717c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf853}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9687}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x788}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46bc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8745}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2be4ff1a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5965b519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d0ee2f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x569a3fa9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29de}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d9a2a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f013c1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ecfd890}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0xc050) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7001, 0x0) [ 614.391288][T10657] binder: 10654:10657 unknown command -1381799058 [ 614.398627][T10660] binder: BINDER_SET_CONTEXT_MGR already set [ 614.407023][T10660] binder: 10654:10660 ioctl 40046207 0 returned -16 [ 614.416504][T10657] binder: 10654:10657 ioctl c0306201 200000c0 returned -22 09:15:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) accept4$alg(r3, 0x0, 0x0, 0x80800) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 09:15:50 executing program 2: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 614.523272][T10669] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 614.582166][T10669] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 09:15:50 executing program 2: socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 614.783506][T10669] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 614.828744][T10669] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:51 executing program 2: socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 09:15:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 09:15:51 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x7001, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) 09:15:51 executing program 2: socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 09:15:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 615.290039][T10696] binder: 10691:10696 ioctl 7001 0 returned -22 09:15:51 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x40247007, &(0x7f0000000380)) 09:15:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 09:15:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 09:15:51 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4280, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x30000004) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x2, "52f3b6960fc6d946"}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000002c0)) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20040, 0x0) 09:15:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:15:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 09:15:52 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 615.790764][T10716] binder: 10709:10716 ioctl 4c03 200002c0 returned -22 09:15:52 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:15:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) [ 615.969789][T10696] binder: BINDER_SET_CONTEXT_MGR already set [ 615.975824][T10696] binder: 10691:10696 ioctl 40046207 0 returned -16 [ 616.049897][T10725] binder: BINDER_SET_CONTEXT_MGR already set [ 616.057802][T10725] binder: 10721:10725 ioctl 40046207 0 returned -16 [ 616.095814][T10726] binder: 10691:10726 ioctl 7001 0 returned -22 [ 616.121147][T10728] binder: BINDER_SET_CONTEXT_MGR already set [ 616.128451][T10728] binder: 10721:10728 ioctl 40046207 0 returned -16 09:15:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:15:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304ce"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@bridge_newneigh={0x3c, 0x1c, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, r5, 0x40, 0x10, 0xb}, [@NDA_PROBES={0x8, 0x4, 0x8}, @NDA_MASTER={0x8, 0x9, 0xad9}, @NDA_IFINDEX={0x8, 0x8, r7}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x2000c044) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x11, 0x8, 0x5, 0x70bd28, 0x25dfdbff, {0xc, 0x0, 0x8}, [@generic="423b04b549e34b6f8d08a8db8e8334ea6244c33a0df311c9df3f936c412e368aeed354e8902563c900ac0abc8cc4d645d63027025fe9416a3aa609bf8bab4ca5b9abfa723974f2038d6900c32a64bcd87241f9ba46326f32299bab32f97dcf09cdd4d36527a687e44cfd74331af2ca044bd48c5290eb7aaa713494ba02319b86979f3bb97bcde12c931c3dd058c24a8d14bcbb31875f0c2af63c8a0c1529938f8397e473e083407fdc67b06b261be5c3bcf103eb4cebdb2c1402cfdf6624"]}, 0xd4}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x400001, 0x0) ioctl$TIOCGSERIAL(r8, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/49}) 09:15:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 616.383296][T10737] binder: 10732:10737 unknown command -838573308 [ 616.391509][T10737] binder: 10732:10737 ioctl c0306201 20000200 returned -22 09:15:52 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) 09:15:52 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x175c42, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000240)=""/48) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x806, 0x3, 0x3, 0x3f9, 0x1ff, 0x8001, 0x2}) pkey_free(r1) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0xf82) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) pkey_free(r1) 09:15:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 616.528066][T10741] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 616.528075][T10741] binder_alloc: 10709: binder_alloc_buf, no vma [ 616.591178][T10741] binder: 10709:10741 ioctl 4c03 200002c0 returned -22 09:15:52 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x8, 0x0, 0xffffffff}) getsockname$netrom(r0, &(0x7f0000000080)={{}, [@null, @null, @remote, @netrom, @remote, @bcast, @default, @default]}, &(0x7f0000000000)=0x48) 09:15:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @remote, 0x8}, 0x1c) 09:15:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 616.721613][T10752] binder_alloc: 10743: binder_alloc_buf, no vma [ 616.738345][T10752] binder: 10743:10752 ioctl 40305652 20000040 returned -22 [ 616.740971][T10750] binder: BINDER_SET_CONTEXT_MGR already set 09:15:53 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xf7c05928231b012a, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000003140c002dbd7000060000000900020073797a32000000000800410073697700140033007866726d3000000000000000000000000900020073797a30000000000800412007000000000000006d6163766c616e310000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x8051) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000200)={{r5, r6/1000+10000}, 0x4, 0x6, 0x22}, 0x18) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 616.790031][T10750] binder: 10748:10750 ioctl 40046207 0 returned -16 09:15:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:15:53 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/231, 0xe7, 0x0, 0x30}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}], 0x0, 0x2, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0)="f0aa53cfc443bb6bc74c2d77a8676a31f4ab866001f7192cdad9cedf1ab52c0d1a2e9ac6bfb6cdeab67300207fa93b63222631e0a934c50e2923d25c60622a42f3", &(0x7f00000003c0)="89d406909e0e9d80c13348c2572cb2615b84e511abcecb85d20775ffaf87866180d5b520bb8c46aa33d86ba24e2deff817baf691df20ae794982b227bfc1fc7288c1c4fc8fe08195c985714ea151f6f2b5308409ae105c14d75a581dbf1f26427991bfaf0e043e49a68da453dda553258b5a3cb77d55ce20d0d6aae6bcd7399267918f15bdede01b80003fc7037bef9989fce3991156e4989af9b5720aa484412ba83449466af0ca9fbdba40e0dd40139e4fc752317571feb47b2cdd5a2324ae074b15c366fc7c8de397d3584bc47e6dfce1258aed849b87b9ceaa3aa3733d3b59ba3bb7555e4b3a614922"}, 0x20) 09:15:53 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) 09:15:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 617.034752][T10767] binder: BINDER_SET_CONTEXT_MGR already set [ 617.052550][T10767] binder: 10763:10767 ioctl 40046207 0 returned -16 [ 617.062434][T10772] binder_alloc: 10762: binder_alloc_buf, no vma [ 617.080777][T10771] binder: BINDER_SET_CONTEXT_MGR already set [ 617.103619][T10771] binder: 10765:10771 ioctl 40046207 0 returned -16 09:15:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 617.135448][T10775] binder_alloc: 10766: binder_alloc_buf, no vma [ 617.175767][T10775] binder: 10766:10775 ioctl 89e1 20000000 returned -22 [ 617.186874][T10776] binder: BINDER_SET_CONTEXT_MGR already set 09:15:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) [ 617.216417][T10776] binder: 10765:10776 ioctl 40046207 0 returned -16 [ 617.340118][T10782] binder: BINDER_SET_CONTEXT_MGR already set [ 617.346138][T10782] binder: 10781:10782 ioctl 40046207 0 returned -16 09:15:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 617.428480][T10784] binder: 10743:10784 ioctl 40305652 20000040 returned -22 [ 617.465173][T10785] binder: BINDER_SET_CONTEXT_MGR already set [ 617.471616][T10785] binder: 10781:10785 ioctl 40046207 0 returned -16 09:15:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 09:15:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 617.837799][T10794] binder_alloc: 10762: binder_alloc_buf, no vma [ 617.846727][T10775] binder: BINDER_SET_CONTEXT_MGR already set [ 617.855568][T10775] binder: 10766:10775 ioctl 40046207 0 returned -16 09:15:54 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e21, 0xffffffaf, @remote, 0x9}}, [0x401, 0x2, 0x8, 0x80000000, 0x8, 0xfff, 0x8, 0x0, 0x100, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6]}, &(0x7f0000000300)=0x100) [ 617.888805][T10795] binder: 10766:10795 ioctl 89e1 20000000 returned -22 09:15:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x80000}) 09:15:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 618.083463][T10800] binder: BINDER_SET_CONTEXT_MGR already set [ 618.099277][T10800] binder: 10799:10800 ioctl 40046207 0 returned -16 09:15:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="9c000454"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x7fff) ioctl$RTC_SET_TIME(r3, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 618.205719][T10806] binder: BINDER_SET_CONTEXT_MGR already set [ 618.237804][T10806] binder: 10799:10806 ioctl 40046207 0 returned -16 09:15:54 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, 0xffffffffffffffff) 09:15:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 618.356471][T10810] binder: 10807:10810 unknown command 1409548444 [ 618.387495][T10810] binder: 10807:10810 ioctl c0306201 20000200 returned -22 09:15:54 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x370, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x546}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x365a}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x370}}, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r8}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, [], 0x1}, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="93f097761adbeed8a9d11cca17248c4d0d07f8aff247313a5ae3dc9ef94092dda33052a3de08a0fd2cc8fd2b52c105abbe37a503a15a18d723622b033ef528a2e43a98", 0x43}, {&(0x7f0000000100)="7a8f097789d6987f759af3ad9624ae985e8c9df2c598fa6a978e5e902d4f05d0cf6464b2fe096a63416552186bd47c72b5ab2b81a03edda1f6bb10f6fdf45e260de427afb0873b27d6d4879d029d3b1cf0d84da6522e985fecdc8e2c2e7508de2d90daf7f683bd427ad92e3cda2361568642892a2d89ea41", 0x78}, {&(0x7f0000000180)="47b41ae51d9b79507a46fc3f36334a1c87ad06611b957e847097baa49d1ea742c39bfb0da26a30398c791473309480b1a0069fe9ad29e4cf73e26b24e68729fe65dedc710c9fbe4b", 0x48}], 0x3, &(0x7f0000000240)=[@dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, [], 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x0, 0x7, 0x3, r8}}], 0x40, 0xc101}, 0x41) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 618.407768][T10812] binder: BINDER_SET_CONTEXT_MGR already set [ 618.413968][T10812] binder: 10809:10812 ioctl 40046207 0 returned -16 [ 618.421316][T10813] binder: 10807:10813 ioctl c008af12 20000000 returned -22 [ 618.455920][T10810] binder: 10807:10810 ioctl 4b32 7fff returned -22 [ 618.494554][T10813] binder: BINDER_SET_CONTEXT_MGR already set 09:15:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) [ 618.501838][T10813] binder: 10807:10813 ioctl 40046207 0 returned -16 [ 618.510659][T10817] binder: BINDER_SET_CONTEXT_MGR already set [ 618.516667][T10817] binder: 10809:10817 ioctl 40046207 0 returned -16 [ 618.538918][T10816] binder: 10807:10816 ioctl c008af12 20000000 returned -22 [ 618.549849][T10813] binder: 10807:10813 unknown command 1986356271 [ 618.556305][T10813] binder: 10807:10813 ioctl c0306201 20000280 returned -22 [ 618.580659][T10819] binder: 10807:10819 ioctl 4b32 7fff returned -22 [ 618.607518][T10824] binder_alloc: 10815: binder_alloc_buf, no vma 09:15:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0xfffffffc, 0x0, 0x8}) 09:15:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:15:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20000, 0x0) 09:15:55 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x2, "6dd4"}, &(0x7f00000001c0)=0xa) 09:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:15:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000091a71451ab02fa2592fc57ba99767f6b5d2e5c6222778b0d9afbefcc2541cf817b92622123e9ef07f45e4a9e154f7097ba9cee5a9b0d77f94fd55f9a5bc77f366db8536040afee4e57120900543f317e7f31d1930f98615b6ed8c1a1b9c84a3f21492c9a84c78ef506e6ddd75761d7974c31e3da18e55e02a31f9eea4104c3aca721f3870d4f0ae376439a7e804d045bcf224e0c080512499120c9087e4405b10c70bf2aedabe0df8a734b8aef"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000240)={@hyper}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) socket$kcm(0x29, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a627300000000000000778d4e54000000000000000000000000008508627700000000fffffe00000000000000000000000000852a627721040000000000a86800000000008000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 09:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 619.069185][T10837] binder: BINDER_SET_CONTEXT_MGR already set [ 619.083366][T10837] binder: 10833:10837 ioctl 40046207 0 returned -16 09:15:55 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) [ 619.179494][T10842] binder: 10838:10842 unknown command 0 [ 619.200400][T10842] binder: 10838:10842 ioctl c0306201 200000c0 returned -22 09:15:55 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, 0xffffffffffffffff) [ 619.254545][T10843] binder: 10838:10843 ioctl 4008af60 20000240 returned -22 [ 619.283172][T10842] binder_alloc: 10838: binder_alloc_buf, no vma [ 619.307855][T10842] binder: 10838:10842 ioctl c01064c7 20000080 returned -22 09:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 619.348444][T10818] binder: BINDER_SET_CONTEXT_MGR already set [ 619.354491][T10818] binder: 10815:10818 ioctl 40046207 0 returned -16 [ 619.379309][T10843] binder: 10838:10843 unknown command 0 [ 619.385613][T10849] binder: BINDER_SET_CONTEXT_MGR already set [ 619.394277][T10843] binder: 10838:10843 ioctl c0306201 200000c0 returned -22 [ 619.399156][T10848] binder: BINDER_SET_CONTEXT_MGR already set [ 619.415752][T10850] binder: BINDER_SET_CONTEXT_MGR already set [ 619.424641][T10849] binder: 10838:10849 ioctl 40046207 0 returned -16 [ 619.433087][T10842] binder: 10838:10842 ioctl 4008af60 20000240 returned -22 [ 619.440472][T10848] binder: 10846:10848 ioctl 40046207 0 returned -16 [ 619.451501][T10850] binder: 10845:10850 ioctl 40046207 0 returned -16 [ 619.490801][T10855] binder: BINDER_SET_CONTEXT_MGR already set 09:15:55 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 619.511801][T10855] binder: 10846:10855 ioctl 40046207 0 returned -16 09:15:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0xffffffff}) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x119002, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = dup(r2) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000000)={0x80000001, 0x3ff, 0x80000000, 0x202}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000001500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001580)={@flat=@handle={0x73682a85, 0x1000, 0x2}, @fda={0x66646185, 0x6, 0x2, 0x2c}, @flat=@handle={0x73682a85, 0x10a}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0xfffffffd}], 0x0, 0x2, 0x0}) getsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f0000000480)=""/4096, &(0x7f0000000080)=0x1000) fcntl$setlease(r1, 0x400, 0x2) 09:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 619.642541][T10860] binder: BINDER_SET_CONTEXT_MGR already set [ 619.660270][T10860] binder: 10859:10860 ioctl 40046207 0 returned -16 [ 619.709146][T10863] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 619.743955][T10865] binder: BINDER_SET_CONTEXT_MGR already set 09:15:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 619.747096][T10863] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 619.775339][T10865] binder: 10859:10865 ioctl 40046207 0 returned -16 [ 619.833819][T10869] binder_alloc: 10861: binder_alloc_buf, no vma 09:15:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 09:15:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 09:15:56 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, 0xffffffffffffffff) 09:15:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:15:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}]}, 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x200080d0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 620.324023][T10880] binder: BINDER_SET_CONTEXT_MGR already set [ 620.350492][T10880] binder: 10877:10880 ioctl 40046207 0 returned -16 09:15:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 09:15:56 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:15:56 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 09:15:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 620.607476][T10891] binder: BINDER_SET_CONTEXT_MGR already set [ 620.617309][T10892] binder: BINDER_SET_CONTEXT_MGR already set [ 620.638116][T10891] binder: 10889:10891 ioctl 40046207 0 returned -16 [ 620.647270][T10892] binder: 10886:10892 ioctl 40046207 0 returned -16 09:15:56 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) 09:15:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000023000505d25a80648c63940d0624fc60100010400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)='/dev/rtc0\x00', 0xa, 0x4) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r3}}}, 0x78) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) mount$9p_virtio(&(0x7f0000000180)='syz\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=virtio,debug=0x0000000000008000,cache=loose,cache=loose,access=client,cache=none,privport,dfltgid=', @ANYRESHEX=r3, @ANYBLOB="2c686173682c657569643e24e976a62434f4f7d8189916b6336e254934a0d41fbbcc1bb9b17d5773c2629d872be9f2603a01b77b27c40df4746d8cd0c16c5b04f151ac6ba4174d68c353ebb1e89fb081060ae85e1df186f9d72aad2b9dd1a7f4f53d7d104912622189dca071b5b3e83fc2c352fa7e6ee009c9", @ANYRESDEC=r5, @ANYBLOB=',\x00']) 09:15:57 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(0xffffffffffffffff, r4) 09:15:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) [ 620.913815][T10900] binder: BINDER_SET_CONTEXT_MGR already set [ 620.923692][T10901] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 620.940072][T10900] binder: 10898:10900 ioctl 40046207 0 returned -16 09:15:57 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) [ 621.000880][T10905] binder: BINDER_SET_CONTEXT_MGR already set [ 621.025867][T10905] binder: 10903:10905 ioctl 40046207 0 returned -16 09:15:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:15:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000080)="5c595866ac091843aed21b5826fbdfa2be4581078f33da37285dd17d96b3221d557cb71bf78793989ae1bc2f3339b89a1da6214067439a3969bc38b14ac504f60b4d8efb52c891fa89c758370bbde99f21fd29a07017dd865cb7f3b2ac353c1f612a4a6b150b1087e1beba16986034006dc9323a72ffb659836c9ea569e70ba62479a5b0323843b83eda340822ba0ada88c07b", &(0x7f0000000140)=""/170, 0x4}, 0x20) [ 621.119114][T10909] binder: BINDER_SET_CONTEXT_MGR already set [ 621.125151][T10909] binder: 10903:10909 ioctl 40046207 0 returned -16 [ 621.248345][T10887] binder: 10883:10887 unknown command 128 [ 621.254357][T10884] binder: BINDER_SET_CONTEXT_MGR already set [ 621.258654][T10914] binder: BINDER_SET_CONTEXT_MGR already set [ 621.261819][T10887] binder: 10883:10887 ioctl c0306201 20000540 returned -22 [ 621.273186][T10914] binder: 10910:10914 ioctl 40046207 0 returned -16 [ 621.278511][T10884] binder: 10883:10884 ioctl 40046207 0 returned -16 [ 621.401173][T10920] binder_alloc: 10913: binder_alloc_buf, no vma 09:15:57 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 09:15:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 09:15:57 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x2e8000, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x1000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x5) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x140c, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1263484000000000c16d8b2f00000000000000000000000000007bb3fe589fc327a5000048000000000000060000000000000000b301801aee68e4ec566a4e52b5ec6565d3d872255db8b7a5351eb05a34ac44194b956d0372d338c981513fbdb43622cfbfe85a7e2a65b98fa2", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x1, {0x1, 0x6, 0x80000000, 0x3}}) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)=0x10) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 621.576273][T10925] binder: BINDER_SET_CONTEXT_MGR already set [ 621.591389][T10925] binder: 10922:10925 ioctl 40046207 0 returned -16 09:15:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 621.631908][T10927] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 621.666755][T10927] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:15:57 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 621.799183][T10935] binder_alloc: 10926: binder_alloc_buf, no vma 09:15:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 621.854182][T10936] binder: BINDER_SET_CONTEXT_MGR already set [ 621.877110][T10929] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 621.885043][T10936] binder: 10932:10936 ioctl 40046207 0 returned -16 09:15:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(0xffffffffffffffff, r4) 09:15:58 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 621.936207][T10929] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 622.062879][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 622.071103][T10942] binder: BINDER_SET_CONTEXT_MGR already set [ 622.092842][T10943] binder: 10941:10943 ioctl 40046207 0 returned -16 [ 622.105106][T10942] binder: 10940:10942 ioctl 40046207 0 returned -16 09:15:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 622.121892][T10920] binder_alloc: 10913: binder_alloc_buf, no vma 09:15:58 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 09:15:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 09:15:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(0xffffffffffffffff, r4) 09:15:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000001580)=0xe8) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r8) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x6, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x1000, 0x8}, {&(0x7f00000000c0)="a524d96be7553090b48d1b", 0xb, 0x10001}, {&(0x7f0000000100)="427a257a66b801132ace2697c1eb49d0b3819a552e0771909433fa93eb3db1c1a5bbbda7cc45cb37cbdbe7547e1bc16271236a1878cc6dff0a2bd40974d72b4ee752865aa8d4c03032426b465b28f781b6b6653dc22285ef1bc8f2b55845ee00b6aaff11fbc481464abfc0a481e2b77728f5508d28f464338bc0587b66af0222ddf303ecb77e530ec12a0d032cb4dfaa0447c7f27156b4d33f5b2afab8d9722d4e516d51c50d1b6a61a0d749fc83b9d1f7f9001dc9f17476673137df772f5400eb", 0xc1, 0x3}, {&(0x7f0000000200)="e0d34468ec58c49c708d", 0xa, 0xf3}, {&(0x7f0000000240)="d385cb39aed9b3efc09fd9c01e1fee7355c4991462b8276299aabc04c0e4c0ef0bb8987158507cc3b703e3c1c97388f81ff5263c6775bd1ccd8b012900e863988d38f51fe889aa970c3d503b74ad1c59a2291a900107bbbdf6662fb97195f80f0164bf65c7699b1a4d1cbc37fc2a0573401cdbc21cfe159b0ff65cab124e7d8c290f62295b9f639dfbfb0c7266a9fd002843c1399066426d5b66dc9d8a41a0c1adebb87efdf66f281fef5db61d65", 0xae, 0x10000}, {&(0x7f0000000300)="675a87118400d4246ee1a235fb3dbb5dd5672aadd473e1b8a93b91cb9cbb434ea7e4c8a5c145c87a223f8c1a9e43b28af5922a21e95b167ac0ec0afdc80c11799da5ac30240ec3b8eb5eb10858389f241acc2106d23b56", 0x57, 0x6}], 0x1, &(0x7f00000015c0)={[{@uid={'uid', 0x3d, r2}}, {@cruft='cruft'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r6}}, {@euid_lt={'euid<', r8}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, 'em1cgroupeth0keyring\'ppp0'}}]}) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 622.418893][T10929] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 09:15:58 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 622.461172][T10929] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 622.500825][T10957] binder_alloc: 10954: binder_alloc_buf, no vma [ 622.667966][T10927] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 622.703841][T10927] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 622.843160][T10965] binder: BINDER_SET_CONTEXT_MGR already set [ 622.859612][T10965] binder: 10964:10965 ioctl 40046207 0 returned -16 09:15:59 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r1, 0xd, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='statm\x00') ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)=""/196) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = dup2(r0, 0xffffffffffffffff) accept4$unix(r3, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x80800) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x2, {0x8, 0x15, 0x5, 0x4}}) ioctl$RTC_SET_TIME(r4, 0x7001, 0x0) 09:15:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 09:15:59 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x5, 0x3f, 0x1f, 0x1, 0x0, 0x1, 0x50, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x7, @perf_bp={&(0x7f0000000000), 0x3}, 0x800, 0x80, 0x6, 0x6, 0xc36, 0x0, 0x1}, r1, 0x8, r4, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:15:59 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600800, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 622.940236][T10968] binder: BINDER_SET_CONTEXT_MGR already set [ 622.969746][T10968] binder: 10964:10968 ioctl 40046207 0 returned -16 09:15:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 09:15:59 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv4_getnetconf={0x3c, 0x52, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xffff}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1f}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe346}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xaf3}]}, 0x3c}}, 0x0) r3 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000080)) 09:15:59 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 623.157819][T10979] binder_alloc: 10972: binder_alloc_buf, no vma 09:15:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 09:15:59 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='U'], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x0, 0x1}) msgrcv(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'/263], 0x107, 0x0, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000080)=""/189) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 623.527327][T10994] binder_alloc: 10990: binder_alloc_buf, no vma [ 623.547413][T10994] binder: 10990:10994 ioctl 4008ae9c 20000000 returned -22 09:15:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:15:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 09:15:59 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 623.856163][T10979] binder_alloc: 10972: binder_alloc_buf, no vma 09:16:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 09:16:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 623.941439][T11005] binder: BINDER_SET_CONTEXT_MGR already set [ 623.966987][T11005] binder: 11000:11005 ioctl 40046207 0 returned -16 09:16:00 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:00 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:16:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 09:16:00 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x220040, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @remote, 0xffffff00, 0xff000000, 'vlan0\x00', 'vxcan1\x00', {}, {}, 0x4, 0x3, 0x20}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x8]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x8, 0xa, [0x27, 0x5, 0x2b, 0x13, 0x39, 0xd, 0xc, 0x2c, 0xe, 0xb, 0x1a, 0x39, 0x4, 0x25, 0x81, 0x2e], 0x1, 0x0, 0x1ff}}}, {{@ip={@multicast2, @empty, 0xff000000, 0xff000000, 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x2e, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x7, 0x4, [0x3a, 0x2f, 0xd, 0x2d, 0x2a, 0x1b, 0x2b, 0x1e, 0x3c, 0x2d, 0x34, 0x23, 0x21, 0x3c, 0x2e, 0x22], 0x2, 0x8, 0x8001}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @local, 0xff000000, 0xff000000, 'vlan0\x00', 'wg2\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x5e}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x2, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x4}, {0x3, 0x0, 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$RTC_PIE_ON(r1, 0x7005) [ 624.261192][T10994] binder: 10990:10994 ioctl 4008ae9c 20000000 returned -22 [ 624.288446][T11016] binder: BINDER_SET_CONTEXT_MGR already set 09:16:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x1f, 0x0, &(0x7f0000000240)="0eaa0de0ff959d2c9df24b959685fe223bad13856e0828296c1889f7b662d1"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="c7d1eddd466b31cdf89147633227adfdef668061895a53fea4b93a6b689b2a97f0d4418afd15ceff554d34604ef800b57e4568d36e7a3d41f182791c0bd56690e705b58aeeb773b28a25cea550a506f0aedf31563b0be2448f299a3a075eb2d69670e6e41d1464469d2241261608e2374adb6b21f4797f6c5c203db404d2054b135034586c7240f2990c7466dcf4a803c4e16b710156e793af9f5cc5fda18d87d6e087320a525b2c92894b1c64f9a3", 0xaf, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r6, 0x35, &(0x7f0000000140)=""/53}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 624.309514][T11016] binder: 11014:11016 ioctl 40046207 0 returned -16 09:16:00 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x410080, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x200000, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$RTC_SET_TIME(r5, 0x7001, 0x0) 09:16:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:16:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x7, {0x5, 0x400, 0x4, 0x7fff}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:16:00 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:16:00 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) [ 624.471717][T11026] binder_alloc: 11019: binder_alloc_buf, no vma [ 624.501639][T11026] binder: 11019:11026 ioctl c01064bd 20000000 returned -22 09:16:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 624.668120][T11037] binder_alloc: 11028: binder_alloc_buf, no vma [ 624.699179][T11038] binder: BINDER_SET_CONTEXT_MGR already set 09:16:00 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 624.723510][T11037] binder: BINDER_SET_CONTEXT_MGR already set [ 624.728160][T11039] binder_alloc: 11032: binder_alloc_buf, no vma [ 624.741691][T11038] binder: 11033:11038 ioctl 40046207 0 returned -16 [ 624.751020][T11039] binder: 11032:11039 ioctl c014563b 20000000 returned -22 [ 624.760832][T11037] binder: 11028:11037 ioctl 40046207 0 returned -16 09:16:01 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:01 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r4, r5) 09:16:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 09:16:01 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) [ 625.081543][T11052] binder: BINDER_SET_CONTEXT_MGR already set [ 625.108835][T11052] binder: 11047:11052 ioctl 40046207 0 returned -16 [ 625.188310][T11026] binder_alloc: 11019: binder_alloc_buf, no vma [ 625.200138][T11057] binder: 11019:11057 ioctl c01064bd 20000000 returned -22 09:16:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 625.390162][T11062] binder: BINDER_SET_CONTEXT_MGR already set [ 625.411154][T11062] binder: 11028:11062 ioctl 40046207 0 returned -16 [ 625.447023][T11039] binder: 11032:11039 ioctl c014563b 20000000 returned -22 09:16:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 09:16:01 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:01 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r3, r4) 09:16:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05630440000000000063404001195d2382de1483a6792dad92fbf8c513c134502a0f653e273676b9cd03c3e4093761d4b06a6b55507939e39b72ed1c68e5d9122fb375fb73fb484f0a54843823fe85d3dc8b0412a966d903be70d97771e0ce8e7ce91c84a3efe81e7186bb1fdf3a81a486304e757d736f238453904c7b8e52d7675a8e0a14d1ac3059c64987158bd4ac1f02bddd7736c0c2d6ee854cbf44756f8e5d3e67edb8bd5fd75118d5ec23211213dbe801ef78a60dd299683a399bacaa912bd64bf8480b7d4fe9a0776006f818579fce70ec036b99edc6b877"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) 09:16:01 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000004800000000000000180000000000ff00", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)={0x89, 0x4, 0xde52, "65b09fa4c51420b1e6788ee6e5629f2bf3d2f05e1d62aac7805873077f4eeaaefb89d80437b028b5e1d56efaf8d2c23e92b8048f4c251f4160db536c43cf28377702ac94ffd1dec8a0cd48098ced72f19b1b952637ad3f4723c68d2e17af797dcc6280b0efd0857bb05f63cec42c3bf85d7f8c9c586ed288b1a3a3784b5af652f5be1027a425756c71"}) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0xa, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @multicast1}, 0x2a, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3f, 0x71d, 0x3}) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @mcast1}, @in={0x2, 0x4e23, @local}], 0x2c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x70) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r6, 0x4) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x1) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e22, @local}}) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 625.610348][T11073] binder: BINDER_SET_CONTEXT_MGR already set [ 625.623883][T11074] binder: 11068:11074 unknown command 0 [ 625.635566][T11073] binder: 11066:11073 ioctl 40046207 0 returned -16 09:16:01 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 625.655706][T11074] binder: 11068:11074 ioctl c0306201 20000480 returned -22 [ 625.678196][T11079] binder: 11068:11079 ioctl 890c 20000080 returned -22 [ 625.692666][T11079] binder: 11068:11079 unknown command 0 [ 625.698727][T11079] binder: 11068:11079 ioctl c0306201 20000480 returned -22 09:16:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 09:16:02 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r3, r4) [ 625.769224][T11084] binder: 11068:11084 ioctl 890c 20000080 returned -22 [ 625.778523][T11085] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 625.822737][T11085] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:02 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:02 executing program 3: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a7bfb8bf"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000240)={0x3f, 0xe1, 0xfb87}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000507000000000000000000000000f63e176f106f8b6b8addf83bb4502a9c99d88621ac61b0ab95ac260fbc1d653100cbb0bf1df3aab4ac866aee9ad234fe8476df649b7d99de3ccf0dc5c48797233fcb9336", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100696f6e64000000000c00028008001400ffffffff"], 0x3c}}, 0x0) dup(r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xb2e7, 0x9, 0x5}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5, 0x9}, 0x8) [ 625.903184][T11091] binder: BINDER_SET_CONTEXT_MGR already set [ 625.913566][T11091] binder: 11089:11091 ioctl 40046207 0 returned -16 09:16:02 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x9) 09:16:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 09:16:02 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r2, r3) [ 625.989751][T11095] binder: 11093:11095 unknown command -1078411353 [ 626.014000][T11095] binder: 11093:11095 ioctl c0306201 200000c0 returned -22 [ 626.058910][T11095] binder: 11093:11095 ioctl 4b47 20000240 returned -22 [ 626.072833][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 626.102079][T11097] binder: 11093:11097 unknown command -1078411353 [ 626.110404][T11101] binder: BINDER_SET_CONTEXT_MGR already set [ 626.117995][T11097] binder: 11093:11097 ioctl c0306201 200000c0 returned -22 [ 626.131770][T11101] binder: 11093:11101 ioctl 40046207 0 returned -16 [ 626.148449][T11095] binder: 11093:11095 ioctl 4b47 20000240 returned -22 [ 626.165009][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 626.177238][T11103] binder: BINDER_SET_CONTEXT_MGR already set [ 626.199584][T11103] binder: 11100:11103 ioctl 40046207 0 returned -16 [ 626.404750][T11110] binder: BINDER_SET_CONTEXT_MGR already set [ 626.428363][T11110] binder: 11069:11110 ioctl 40046207 0 returned -16 09:16:02 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:16:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 626.491546][T11085] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 626.541935][T11085] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:02 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) syz_open_procfs(0x0, 0x0) sendfile(r3, r3, 0x0, 0x20000000a807) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0xd813) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x400, 0xd7e, {}, {0x4, 0xc, 0x40, 0x5, 0x1f, 0x9, 'g\r\nh'}, 0x8, 0x1, @fd, 0x54280000}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 09:16:02 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r2, r3) 09:16:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10001, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x25, 0x4, 0x8, 0x19, 0xa, 0x2, 0x5, 0x27, 0x1}) rt_sigtimedwait(&(0x7f0000000240)={[0x1ff]}, &(0x7f00000002c0), &(0x7f0000000340), 0x8) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000700)=""/4096}, &(0x7f0000000480)=0x78) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 09:16:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x180, 0x0) set_tid_address(&(0x7f0000000040)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x39, 0x0, 0xc, 0x0, 0xc5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x17) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x4, 0x5, 0x0, 0x7, 0x77, 0xf5, 0x0, 0xc0, 0x4, 0x4, 0x20, 0x7, 0x68, 0xf9, 0x0, 0x6}}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r1, 0xd, 0xffffffffffffffff, 0x0) sched_setparam(r1, &(0x7f0000000080)=0x1ff) 09:16:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 09:16:02 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:16:03 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) 09:16:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 626.909254][T11132] binder: BINDER_SET_CONTEXT_MGR already set [ 626.931572][T11132] binder: 11125:11132 ioctl 40046207 0 returned -16 09:16:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x2, 0x2, 0x0, 0x8, 0x0, 0xc5, 0x3}) [ 626.964467][T11135] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 626.964477][T11135] binder_alloc: 11122: binder_alloc_buf, no vma [ 627.023623][T11139] binder: 11122:11139 ioctl c008ae91 200000c0 returned -22 09:16:03 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r1, r2) [ 627.099461][T11143] binder_alloc: 11126: binder_alloc_buf, no vma [ 627.131170][T11143] binder: 11126:11143 ioctl c058565d 20000080 returned -22 09:16:03 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:16:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000003c0)={0x40, [[0xaa0eb2db, 0x234, 0x7ff, 0x3, 0x6, 0x8, 0xa6, 0x5d39], [0x7ac4, 0xfffffc00, 0x80, 0x6, 0x2, 0x9f30, 0x9, 0x1], [0x9, 0x6, 0x10000, 0x3, 0x6, 0x3, 0x9, 0x9]], [], [{0x650d, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x7ff, 0x6, 0x1, 0x1, 0x1}, {0x8c, 0x4, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x81, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x1}, {0x4, 0x200, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x2, 0x1}, {0x0, 0x400, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x3f, 0x2, 0x1, 0x1, 0x1, 0x1}, {0xfe71, 0x6, 0x0, 0x1, 0x1}], [], 0x40}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x208001, 0x0) accept4$unix(r4, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80800) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 627.476861][T11154] binder_alloc: 11150: binder_alloc_buf, no vma [ 627.520250][T11154] binder: 11150:11154 ioctl c2604111 200003c0 returned -22 [ 627.675520][T11135] binder: BINDER_SET_CONTEXT_MGR already set [ 627.687340][T11135] binder: 11122:11135 ioctl 40046207 0 returned -16 09:16:04 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x80c0, 0x0) fsync(r0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) io_uring_setup(0xb68, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0x361}) ioctl$RTC_SET_TIME(r1, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:16:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:16:04 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r1, r2) 09:16:04 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 09:16:04 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x34, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD1={0x8}, @IFLA_GTP_ROLE={0x8}]}}}}]}, 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000102}, 0xc, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08050000", @ANYRES16=r4, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x4000}, 0x2000004) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000680)=0x7, 0x4) 09:16:04 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) [ 627.942745][T11165] binder: BINDER_SET_CONTEXT_MGR already set [ 627.962492][T11165] binder: 11162:11165 ioctl 40046207 0 returned -16 09:16:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 628.041767][T11177] binder: BINDER_SET_CONTEXT_MGR already set 09:16:04 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r0, r1) 09:16:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 628.083052][T11177] binder: 11162:11177 ioctl 40046207 0 returned -16 09:16:04 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) fdatasync(0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000140)=0xc) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f00000000c0)=0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x18141, 0x0) [ 628.194327][T11152] binder: 11150:11152 ioctl c0306201 20000540 returned -14 [ 628.203812][T11154] binder: 11150:11154 ioctl c2604111 200003c0 returned -22 09:16:04 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) syz_open_procfs(0x0, 0x0) sendfile(r3, r3, 0x0, 0x20000000a807) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0xd813) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x400, 0xd7e, {}, {0x4, 0xc, 0x40, 0x5, 0x1f, 0x9, 'g\r\nh'}, 0x8, 0x1, @fd, 0x54280000}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 09:16:04 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x1df) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0xd4, 0x1, 0x4, 0x0, 0x25, {0x0, 0x2710}, {0x4, 0xc, 0x6, 0x66, 0x4, 0x8, "98d04964"}, 0x9, 0x2, @planes=&(0x7f0000000080)={0x8, 0x1ff, @mem_offset=0xffffff80, 0x4}, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0xfffffffd}) 09:16:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 09:16:04 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r0, r1) 09:16:04 executing program 4: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in=@remote, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d, r5, 0xee01}, {0x0, 0x0, 0x9, 0x8, 0x6, 0x2, 0x0, 0xffffffffffff7fff}, {0x5, 0x8, 0xff, 0x6}, 0x100, 0x6e6bbd, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d3, 0x33}, 0x2, @in=@private=0xa010100, 0x3503, 0x0, 0x1, 0x3, 0x70, 0x5, 0xef}}, 0xe8) [ 628.444891][T11196] binder: BINDER_SET_CONTEXT_MGR already set [ 628.479912][T11196] binder: 11192:11196 ioctl 40046207 0 returned -16 09:16:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 628.578780][T11204] binder_alloc: 11194: binder_alloc_buf, no vma [ 628.625744][T11204] binder: 11194:11204 ioctl c058565d 200000c0 returned -22 [ 628.708448][T11208] binder_alloc: 11203: binder_alloc_buf, no vma [ 628.723028][T11177] binder_alloc: 11162: binder_alloc_buf, no vma 09:16:05 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r1) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 09:16:05 executing program 2: r0 = socket$kcm(0x2b, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r0, r1) 09:16:05 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xf7c05928231b012a, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000003140c002dbd7000060000000900020073797a32000000000800410073697700140033007866726d3000000000000000000000000900020073797a30000000000800412007000000000000006d6163766c616e310000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x8051) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000200)={{r5, r6/1000+10000}, 0x4, 0x6, 0x22}, 0x18) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 09:16:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 628.877755][T11217] binder: BINDER_SET_CONTEXT_MGR already set [ 628.901020][T11217] binder: 11214:11217 ioctl 40046207 0 returned -16 09:16:05 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000480)={0x5, 0xbb85}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x54d83, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$eventfd(r4, &(0x7f0000000000)=0x8000, 0x8) 09:16:05 executing program 2: r0 = socket$kcm(0x2b, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r0, r1) [ 629.126736][T11229] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 629.154352][T11229] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 629.185676][T11231] binder: BINDER_SET_CONTEXT_MGR already set [ 629.198251][T11231] binder: 11226:11231 ioctl 40046207 0 returned -16 [ 629.281220][T11204] binder_alloc: 11194: binder_alloc_buf, no vma [ 629.282952][T11233] binder: BINDER_SET_CONTEXT_MGR already set [ 629.297786][T11234] binder: 11194:11234 ioctl c058565d 200000c0 returned -22 [ 629.316193][T11233] binder: 11226:11233 ioctl 40046207 0 returned -16 09:16:05 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0xe, 0x8, 0x0, 0xc5}) 09:16:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000000c0)="e6e4ea49665cf04ab5e2e2531498453756996e7d11f95964c51b40288321c48718ae97c52c89f021ba1120b421318bd815a8c8cb47a6b5ab5f31748ce33a6e3198c9ea6a2655fb6fb36990282dfbcdcb2f8e69ce909cfe8c2efdfeb4cbdf9a7badc0ec9eb73188df86ba58e341335c6d4f352075cd10c70647692e854e22") ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) 09:16:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 629.419218][T11208] binder_alloc: 11203: binder_alloc_buf, no vma 09:16:05 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 09:16:05 executing program 2: r0 = socket$kcm(0x2b, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x20000) dup2(r0, r1) 09:16:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 09:16:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @local}}, [0x100000000, 0x9, 0x7, 0x100000001, 0x1, 0x1f, 0x8, 0x5, 0x5, 0x7, 0x3, 0x1, 0x4]}, &(0x7f0000000000)=0x100) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r1, 0x5}, 0x8) [ 629.555262][T11246] binder_alloc: 11238: binder_alloc_buf, no vma [ 629.567601][T11249] binder: 11238:11249 ioctl 80487436 200000c0 returned -22 09:16:05 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000700)="9fc6fd43a93a1484bc899c1b6026b5b6c45844f1879437cbe2548b07e385fddf7788baeeafcf9cc6950813b8480ba4a601f29341f75197b367a4c5c0cfcb0ae3b3623ae50b057803a9355e7f98f64a05bd1dae6c3e7507a9d3acf1c6b63849325caca69595d83f80fbbbd2576aa6c2c6b420e44be43df89f87680b59d575e13edf6ad1460281b7e2fbc290fe8be72dde022da0844f8df2b1087a9dca50b36c208c49509336445a90f4fb6cf276405b5ef68a5156e063d89efea951afb50f7639db157aa52983143d91084eff1471627c4809bd93934be89a95ed5c1db485a02233838c20cb7f336f6a30d2fc6bc76031f76f97101931566275fd3171d28cf53fc2e533149ef83f5f571af7d8b7e86770c64d729a1f0607279a5298b7a7c44df4c22f953401f4641a7975f129a813f607b83f68145151057dc37cd31400db7a897a546a903baa482fc0768c9c6b081ab52a4ec658a355909476f4dd6c6552765f84bad6ada36be08d8aa8e014ae74708447a134dab10881989f5cf649dfac46cb9052f604c53e6a40021b2789bc2764e8c82008ec85d409a0c8f8d48cd597102fa278af9ce25ed5025570d1e4f006b1daf328cbb6f015e502b049a76ae9e5b40bdc7493ed707b68a19ee679f7e8e50fed75c007d957335b1497ec71b9074afd07f05ab869852e99e9c2a2f301c6ace022bd73cb28a7c8f21bd73fd7690f40c7dc405fbf7f39117753c3cc5f1422107f4c413c29dc59fada8da70743dbf3cdf6df76f3d9d25c5aa5196e2cfafefe50adc72631278c716f5ef14db22cd4595f618ab00a8b1815bc7e81030630a2458fe16861a2668566e948969ee496e93aa593b97b27927093b7d94c1e130f3d931a093ab7c9ac5d42db37c2e115b0c399ab53e80d018fe4aa4dce17a0b3153e55845247be2494ee565cf1d1e5c8dcf654c60b184b020614f2fdd7b2d526776d83209cce4c51e5ed11ea08a9ae4636871d3a380d879abe608f3096e0be82a01211abac692bc1bf782b681bef09aa404e6cca24ef5846060a5a0e1557d728eafda03428ff3490df08f777dfa164606d44b432cd6d6b0d06016d0158e61743324daa6b9ebe6692b69fe311b075fc147c1424984a5b62bce253606e376c96f506574c56493fe834876d1e44f53a06ca4aaf849e72e14ab352f20ba4dfc9221fae989cb99159fa481ba4496c1ef47f3478022f3acfa34e95b6047ea648a0b095bd4dd2a1165907eec2b2769adf739fb6cab601e10fcc6a4cfdad52a7f6b037d23f58d790b30c287616e135afcb919374c7161acf0dcd9c29b4d0989e8cb248726448ff6f7b3667115ba96a82924ea7b293dcbffa7f218822fe8958f17792518f5ae4fc8ebf80afbc74706811c9353cb4cc80be57773dbc21c685b695a91e0b3034fc76d1b2ec0f61328bde63aede4fabb5bf94b064cb78e32cc166cc79341235445e4a650dc09536c4f7175203092fbeae1b335e767b32f980261b4cb24e5b760b64fa3486bf1b69953986bc82cf5808af0ea14a5d3999a19e0c9bb72eb8ddfacc105b64c0305515dbf9bafdbfb608f989bed86495d1b8b9c854b5c0bfe1c0df499a12af8711e0787210fe5933efa7f371b01bc9818d4ce0c11f0c1bb44ea09ab5c807afa835fd91d96f1db099436264a798b8381b6416b38f2c9db431cf98c4170da6fb386f6f03ae1ab9e0342a96de5c9fee9228f75ef981ee6143cfb061b6ef27f7c93437ea358041648fb459a80253f4904f76cd813fa01ebe37286ae952f32204109f3561500f1ce2a8678fe6e72789c382eafdef16752589b6168404c71938e0317eb01c5ed03eab6f75287a49bd62988373955a54975327ad32c18cd0d0c0c6dfc8a23cf171ab8f363bbcf99bc4782e1f23de052274f0489c135af742064f43ca4a91ca78a995847a5993184a3f814329d22c3e5b1749fb13e4d6fa3a4734297622fb646e59ab666536bcf63df36e325d0be9cdc2cbd27e36c5cae5ae4bbd06640869c1d44edf640256ba19ea4a39677991f2e84f83e413fc7abb6311fc4352499115ac3158d898bca8b10410c64748769f870426072dc00180e5c0532c2e4004ec30e520abf88840b76f672c6df10807959e84e8e3d2e85a40ec2be85a2a84435b9f439820d5ce89c9bcdfb1680df212dd3c5e1620a8ba6e5aaf014b3027f83fb8510f4bbfe0a71b04bd3698a3d9325f5207d31be729302302c7b8d52eb9f058032251cfc40065f0e36f7659508e183d1c84c303772841385446ed2d983b4ae10c333f38ae5253f77a6206ac029a00a795c275f73a1062feaf6cc85da889e751ea676202532f9bff1d1495a9557a92a0f154f5e49474f719b4913201a2eea2b81c265363fc528f01061dd394bded08639ea20b5fe0e99792ba33b5e5faa69e27a9e608c4493ee2d3b382b4edd0d5a8e71b49ce75860d99579e69904daad9f6cf877f0076370686f4f128d9320347f7c2913911a640b8133d8e580a1cf575a1b03c92305d570083819da351d38112629fa87252d3c4be8a00586180f6be0e082b814d3f0d30da88ee99f08e5dea1eba2136164a9139202477cc657426bf9ba267973c3d545c4bb9e47caaca0bc9be0966258561f1ee82378d5bccc1697b549fb7737ed4d31f59d0a8c73b2e15b65bbd34dffc49b55d38096a7b7f2a1fe5e2cb7f58b2204635e67fd8262ab586bf400d5ae645bcfa567addcdc1a9e465691c5a5a422e46679023aa33d5ad2df77ad00ec6972149c75344efa25bfd60d9e400b752f5691bb4f56464f025d37df4673ecf7053e842200d4452c7aaadbdfc21f94bcae37fb82821ec73cf1394a784bbdd3602b95541cb49b53d4bbfd6d624ef09acff2b530d5f85a4ba69f7a84254565cef32a325e2b3426bfdfd3d01b54d16d35cf4b455a4aaac5c7b33b15d71473e0684a7b28573473af1db09d45a43ba8c2b22a6511b37f589c261dbe63392e217c8a337061c25202745a6fad1a89324354e026506691e82c7bc0c004a3a7d29776d677cf4d294f57bd9c82a58c9865e3cae9a7585ef47099504530e28b117cef818421e872ccd0870650981a0dfffe33faf99117d371480fabc6bc03d370335f4825a77df0631bd8fd15cff7ac3dbc532c4b21afad659f71aa73b690562a96273e5a84d146a6055c45863135dee30257e4e8fb9d8b6ea954fa9436fdb3f571277b39a3d1fd8644d9c19052861469649725e9553280db93e1ed8b74368926a9311f76d4ba136b2ee491d37749dad8d3dfaf4849918acea2cf2253eb07ff1ee8522bfba773e83ca2ab845b4199c42aa1c2134d60c27b3fcab4ec0e6cd31ad8c470183edb4df62c277ae9dfff033f14f8757b879dfca36797d21aac7449d227b143798edabd7583de24151bc6562ca303c387f98e8ca33e0c5d004c8611ae627707df6d0d08ccf80812aba7c20749cd8d7699b80da5bc4802a54294a852c6aeac9a24916bf96df2802033249c68cfea17e8a9339cef5b4da51175f79243aa9d89120f0f89216448cb72f2312b6e92f818f453f6500ff35b1963b4430893e1274f0668ba975fe94b1410f2c760419c0a5c02fd10edc6b663ff471464cdbd68f3d101980242c7572d40c820d7b1340c96b4f94c94962b4bceba853ad0e5d481aa1f47bca65d8815accf87144ece95e3dee0f7f6e899ef7f6abeb172c15c8ae44c666f958369061697e45618b0ca5a308d17c51ae831807edc2481c6807f7987645a6e346eb1c05adeabce81ea70445527092e7938ca2007c03e93fbc846ec2d4116e43bc274b6e3e7a1ab6ac0e9dbc5ea0b49ba09d21ecc3c50a448b966353067eefa00cd386f680e5a770fb231c2ebf8f2017a5ae1c29b561efbf0f3393000a2818ecf1102ea089aa562bdf89d2eec0081540ba657e815e4d22bb83313a6801fd7aa7885eec2dcc3e21fc44c5d1693df6b4a0009c26ad1215abfd7bedb43c1cf599428948ede39d24cfc5cd46c79eb15470d5cc9b1f03ce6aefb4be778175ea2bdf343c165ecd1512af00b6c16b4b79401f430b833d8e6bef1ca1b5b4c729b55065c319aba9775b4448041d55770e448d39c48fab5f9d1aa79d1d18cf75380e9ce374bef9254fbadb0b6553dda4a426b3409a67df03c9efdadde127cf27f633d89351a20aca26caa7bc2ff4d621b06cf032a31ac94ffe6ae9c8db9d79404a48a6a23888547d84ae3b73a7447cca54a38dd6a819ec9ebd70fd0652373fc13ea9d3c6b8055086756697a2417c74955e3147619884d9da61804f7a5af441a4b81631850c108bf24e02e077dc38a3a5d640d967162762b9b1adf6924b47caf13b530798fdb6bf3306d51518de47427ab2dd9b7f2d7c573ea2bdee3b2e3ff2807077437560ce5eb26390869912c67560b1f77a711f993d15947fab4df33040ff7dc069a7aaec8181d23fadff4918bacd88cf767f36d1f6170fb650b58f51f82b074c55a7bae9bb20d272272aaa992b0f3ea35d30acbe21aee23b622eb874b025bf451a2f0a0040605e95e84b21cd102e64e4435701db4001c1d2b5bee945bc846577d3ea8adaaa2ab87daf4a54e8421c481cc5f751bba15c6a47f757dcae3b14409a49711d9436f24ba72ce625fa3c8514af3cba5945a75003794fd75fc5ea366a70a08a1ebfd04719dc9b06266891fd0359cacd25a93277b5130c2403729bf7ac55307974e9ae59399755678d6f63f8b0ca741e3eacd3e8e868c5d42711db4284dbf687713eaaf8c84c14191ab812e041798c8430c64cdf11b1b3411d4400dd61ae7221f97d866ae2d2a0a792b901a93d737409a747132e94e7ebab7b36ccf6ea7e69b9097fbfd9b533861583d51897dc5bbd2b735508bfef3c61dbe8211aa1fa6a83926dc31ceec3f4eb62e57adffb9eff655d3a8e3ececc4db18900d6953ae3b4490670ad84b75d051abadc3ebccbc9f2b09779363a4845601acd63235d7a2be50039b54be1f11646525cabb953e03bf3dae4d8fc97ffe225850e0df52133b9ec428d5c6410cd1baa357ecc35e79ba35aa344a4e70fcfb102a477a39fa9db46a9fc02557a27b726f187b469803cf09b392cd99261876cc9379ea79ecd30a2a283912d248f33484e800a06509ca73974cb3c8e0b4a190c7817c66e0d5c5dcbf672fe9895bbb89ae2f1298f7ac1ead71e3a1688495c363818d965ecef5daa3dfd440c72c0667a1904aa00c9f2bdb07ed485fe963561be6197a46eb4557555890e20d11ef9d1076c4f75d574a25d82cb9974dba22caad9b16d6f42df9325795dbc08a6104abb10100e7a4dfba1baa41d09593480d767c5936eadbba90bd469c3181f996a8134560cbb6d8ac5678e339c1e8816acf7d6f9c32c78750bd05bdf12265622e5e4195df594ca71a6db1e238618fc4344699d66d1a0d0691ec388b94d1276442e1e4f12c74c614df95fe6bcf1f80ba04dbdf7d692fe1d486462a5957d8ae5aa496dc853d314f61dc3a1db524451de3eea72cbe036c19e576acc3bd211aa14565a4ddc9232e8141decd79f5a6024c03f2442c7336eaeef162d0216b9962d4fb38b72f8b570d06d40f35b52555b0871634b1f934f6281c97e28dbcd00355aca0c6fd4e05986aeabbe896d675696029aa401e545b1191d02b7f3b9a23be47a0b96d520b315bb840e17d59895ceb6d131114e575de9a4f8fa25c8316db18e9c72123d0097407bc6f4c33e7f236b461fd54a0dc08af446481d4972e781302d06a11b837014c5bcb817db5a85b0577e128bb45d7323e729434653727d7158063b6202b4f2ed54c3d7ba", 0x1000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000002c0)={{0x1, 0x1, 0x3, 0x2, 0x26fc}, 0x34, 0x76e6}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x8, 0x0, 0xc5, 0x5, 0x4000}) 09:16:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 09:16:05 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x20000) dup2(r0, r1) [ 629.891451][T11266] binder_alloc: 11260: binder_alloc_buf, no vma [ 629.915461][T11266] binder: 11260:11266 ioctl 40485404 200002c0 returned -22 09:16:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000480)={0x5, 0xbb85}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x54d83, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$eventfd(r4, &(0x7f0000000000)=0x8000, 0x8) 09:16:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x28, 0x0, 0x8}) 09:16:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 629.936937][T11266] binder: 11260:11266 ioctl 4024700a 20000000 returned -22 [ 630.122537][T11273] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 630.184420][T11275] binder: BINDER_SET_CONTEXT_MGR already set [ 630.191007][T11273] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 630.202905][T11275] binder: 11272:11275 ioctl 40046207 0 returned -16 09:16:06 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00001d10000507000000000000f9ffffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffffffff"], 0x3c}}, 0x0) recvmmsg(r1, &(0x7f0000005240)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/178, 0xb2}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f00000011c0)=""/62, 0x3e}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x5, &(0x7f0000002280)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003280)=""/124, 0x7c}], 0x1, &(0x7f0000003340)=""/124, 0x7c}, 0x9}, {{&(0x7f00000033c0)=@can, 0x80, &(0x7f0000004800)=[{&(0x7f0000003440)=""/178, 0xb2}, {&(0x7f0000005500)=""/172, 0xac}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/187, 0xbb}, {&(0x7f0000004680)=""/212, 0xd4}, {&(0x7f0000004780)=""/36, 0x24}, {&(0x7f00000047c0)=""/30, 0x1e}], 0x7, &(0x7f0000004880)=""/76, 0x4c}, 0x1f}, {{&(0x7f0000004900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004980)=""/6, 0x6}, {&(0x7f00000049c0)=""/40, 0x28}, {&(0x7f0000004a00)=""/24, 0x18}, {&(0x7f0000004a40)=""/93, 0x5d}], 0x4, &(0x7f0000004b00)=""/181, 0xb5}, 0x200}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004bc0)=""/195, 0xc3}, {&(0x7f0000004cc0)=""/191, 0xbf}, {&(0x7f0000004d80)=""/241, 0xf1}], 0x3, &(0x7f0000004ec0)=""/40, 0x28}, 0x59c}, {{&(0x7f0000004f00)=@vsock, 0x80, &(0x7f0000005140)=[{&(0x7f0000004f80)=""/141, 0x8d}, {&(0x7f0000005040)=""/137, 0x89}, {&(0x7f0000005100)=""/41, 0x29}], 0x3, &(0x7f0000005180)=""/149, 0x95}, 0xffffffff}], 0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000005480)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x28, 0x1406, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000818}, 0xc084) prctl$PR_SVE_SET_VL(0x32, 0x36be8) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000054c0)) 09:16:06 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x20000) dup2(r0, r1) 09:16:06 executing program 4: ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:16:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 630.257191][T11246] binder: 11238:11246 ioctl 80487436 200000c0 returned -22 [ 630.281478][T11278] binder: BINDER_SET_CONTEXT_MGR already set [ 630.297465][T11278] binder: 11272:11278 ioctl 40046207 0 returned -16 09:16:06 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x20000) dup2(r0, r1) 09:16:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000340)={0x800, 0x300, 0x300, 0x2000, 0x8, 0x6, 0x8, 0x1, {0x1f, 0x3, 0x1}, {0x0, 0x1}, {0x1, 0xfffffff7}, {0x6, 0x8, 0x1}, 0x2, 0x100, 0x3, 0x1, 0x0, 0x87ee, 0x80000000, 0x8, 0x7, 0xfffffffe, 0x400, 0x7f2, 0x20, 0x0, 0x1, 0x3}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x5}, r5}}, 0x30) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x420240, 0x0) 09:16:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x3, &(0x7f0000000480)=[{&(0x7f0000000200)="81335db93cea68f835f75b4058e54b3f5fc2d2b29257b531594a890661fb8a75e4c2700fb780a5cb52ec1e9c30571553fd68b1c8a0397526af8b8134b233a9a26b2edf4244ada6c8d384aded6be64e0e71b18c2c533c3f037f9d43bef3856022b07788eb478acfc61d339a0784010d0ca56eb7188357558a92b52e7634f82cdb1fc1047917fd9bc3161d82b428626953cfa733909ee718e1", 0x98, 0x3f}, {&(0x7f00000002c0)="7c164e44d02d9ebdcea5b3044e57c41a1bf04a72f66749ab1d11af81162072a9254fed5d1e2639021add7afd84a16a6349792d81f91dbcb6412a1b4f2f484fd50e6693344218bbc134e408e9736ca8eff19d2662633071ec13c6def4e411917569559fd37142e9364abb8611ba2f1dd5858a960275bf766c65f23fcefbfa3c38a0dae1d1a49b", 0x86, 0x200}, {&(0x7f00000003c0)="c5b2e3675d15ec2e77de44aea8911dc843d20101edae5c62ecd4adca18a0fb0ad94b2f034873ef26", 0x28, 0x1}], 0x2004040, &(0x7f0000000500)={[{@prjjquota={'prjjquota', 0x3d, 'lowlan1'}}], [{@audit='audit'}, {@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, 0xa, 0x6, 0x306, 0x0, 0x0, {0xc, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x8, 0x0, 0xc5}) syz_mount_image$reiserfs(&(0x7f0000000580)='reiserfs\x00', &(0x7f00000005c0)='./file0\x00', 0x8000000000, 0x3, &(0x7f0000000800)=[{&(0x7f0000000600)="c64fa386257fc813d47fa9dcb9d7327d7cd28f6e8f358f11a07931c9da69b82411386e698811bd150cb05ffc42e024708bf69a16e13e89e45a031cf6f4bdc2946ca95dfe705c0e96b5439fc26d321fb9b5fe425d0a2da42452", 0x59, 0x331}, {&(0x7f0000000680)="f4e83116d0c8bd7191c666fc18494a2cd57d92fddc9f48eb9615ac76cee6885e3427b4e3ee73b8fd3422b36a21d828e64034929d213d7ba8540b8961250074ee17ba4dd050405e9678a8b8bba5067c564a2d121caea05455579ddd0ff3781e9f3b1329bfa839f56e9607fe5fdf204cb6a1e820542763dcb4c6b2f6982aefb4816ee4d4c1046a02", 0x87, 0x7}, {&(0x7f0000000740)="6533334778eea088a029d9e3991edaf2a110200f578074252a61c1bf70fd4148ce2f103fafcfc86ed2fb04264cc8d4c3187b7f8f754542476080f4223ecd8a819741ba2a0dd54fb054aff3466d1b77f48ce6f496f1975b3be1b910ffeb2175093f9f687dbb31c26c54b769707a4e3eb95a30161df963b81af05f8d77978edf6c3533b81fbcf683f0b86a94aaf4a3ccd831cc2b8edde72702e398cb8ef033ac13793e2484fb87f2a8aa678339629a3a6d2356a8f576fddee38a844c357c", 0xbd, 0x7}], 0x104800, &(0x7f0000000880)={[{@errors_ro_remount='errors=ro-remount'}, {@data_journal='data=journal'}, {@balloc_noborder='block-allocator=noborder'}, {@usrquota='usrquota'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@hash_r5='hash=r5'}, {@resize={'resize', 0x3d, 0xf6}}, {@acl='acl'}, {@data_journal='data=journal'}, {@jdev={'jdev', 0x3d, './file0'}}]}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1f040040"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000e3ff63404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) recvfrom$l2tp6(r6, &(0x7f0000000980)=""/207, 0xcf, 0x1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @private0}, 0x20) 09:16:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) [ 630.643923][T11266] binder: 11260:11266 ioctl 40485404 200002c0 returned -22 [ 630.652117][T11266] binder: 11260:11266 ioctl 4024700a 20000000 returned -22 09:16:06 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x20000) dup2(r0, r1) [ 630.782058][T11302] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 630.795032][T11302] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 630.899363][T11305] binder: 11300:11305 unknown command 1073742879 [ 630.923823][T11305] binder: 11300:11305 ioctl c0306201 20000200 returned -22 09:16:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000480)={0x5, 0xbb85}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x54d83, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) write$eventfd(r4, &(0x7f0000000000)=0x8000, 0x8) 09:16:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:16:07 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) [ 630.949115][T11310] binder: 11300:11310 unknown command 1077961727 [ 630.990952][T11310] binder: 11300:11310 ioctl c0306201 20000280 returned -22 [ 631.046805][T11305] F2FS-fs (loop0): Unable to read 1th superblock [ 631.064478][T11305] F2FS-fs (loop0): Unable to read 2th superblock [ 631.102412][T11318] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 631.154109][T11321] binder: BINDER_SET_CONTEXT_MGR already set [ 631.168098][T11321] binder: 11313:11321 ioctl 40046207 0 returned -16 [ 631.171688][T11318] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 631.190870][T11310] binder: 11300:11310 unknown command 1073742879 [ 631.204392][T11302] binder: 11300:11302 unknown command 1077961727 [ 631.217359][T11310] binder: 11300:11310 ioctl c0306201 20000200 returned -22 [ 631.229094][T11302] binder: 11300:11302 ioctl c0306201 20000280 returned -22 [ 631.256560][T11324] binder: BINDER_SET_CONTEXT_MGR already set [ 631.262994][T11324] binder: 11313:11324 ioctl 40046207 0 returned -16 09:16:07 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x1, {0x1, 0x1}, {0x0, 0xf0, 0x8}, 0xfd, 0x2}, {0x0, 0x2, {0x1, 0x1, 0x4}, {0x1, 0xff, 0x2}, 0x2, 0xfd}], 0x40) 09:16:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:16:07 executing program 2: socket$kcm(0x2b, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 09:16:07 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = dup2(r0, r0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x210000, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x76}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x7, 0x7ff, 0x8, 0x1, 0x7fffffff}) [ 631.404938][T11305] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 631.433730][T11305] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 09:16:07 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r1, 0xd, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0xc, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000002440)={r7, 0x5, 0x10, 0x7, 0x3}, &(0x7f0000002480)=0x18) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000023c0)=[{&(0x7f0000001080)=""/192, 0xc0}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/161, 0xa1}, {&(0x7f0000001280)=""/122, 0x7a}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/17, 0x11}, {&(0x7f0000002340)=""/94, 0x5e}], 0x7, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:07 executing program 2: socket$kcm(0x2b, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 09:16:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x2000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0xa, 0x36, 0xa, 0x14, 0xb, 0x800, 0x2, 0x6e, 0x1}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:16:07 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getpeername$ax25(r3, &(0x7f0000000080)={{0x3, @rose}, [@null, @null, @default, @netrom, @remote, @netrom, @bcast, @rose]}, &(0x7f0000000000)=0x48) 09:16:08 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000700)="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", 0x1000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000002c0)={{0x1, 0x1, 0x3, 0x2, 0x26fc}, 0x34, 0x76e6}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x8, 0x0, 0xc5, 0x5, 0x4000}) 09:16:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 09:16:08 executing program 2: socket$kcm(0x2b, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 09:16:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 632.048284][T11362] binder: BINDER_SET_CONTEXT_MGR already set [ 632.069686][T11362] binder: 11359:11362 ioctl 40046207 0 returned -16 09:16:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x381600, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1f, 0x3, 0xfffffffd, 0x0, r3}}}, 0x78) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) r6 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r7}}}, 0x78) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r8, 0xd, 0xffffffffffffffff, 0x0) r9 = getpgid(r8) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0xffff}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x800, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r10, 0xd, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, r5, r7, 0x8, 0x2}, 0x4, 0x4, 0x6, 0x4, r9, r10, 0x3}) 09:16:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 09:16:08 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 632.138631][T11365] binder: BINDER_SET_CONTEXT_MGR already set [ 632.152624][T11365] binder: 11359:11365 ioctl 40046207 0 returned -16 [ 632.174193][T11365] binder: 11359:11365 ioctl 40485404 200002c0 returned -22 [ 632.206070][T11365] binder: 11359:11365 ioctl 4024700a 20000000 returned -22 09:16:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 09:16:08 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x371623, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 09:16:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000002c0)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x80000001) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x11b, 0x0, 0x0, 0x8, 0x4, 0xc5}) [ 632.488362][T11349] binder: BINDER_SET_CONTEXT_MGR already set [ 632.494495][T11349] binder: 11342:11349 ioctl 40046207 0 returned -16 [ 632.566208][T11355] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 632.566217][T11355] binder_alloc: 11346: binder_alloc_buf, no vma 09:16:08 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="00000000000000000b1dda9a1f75a23b83945d03c9aab1a59ee14c5d071f4a3e6a"], 0x0, 0x2, 0x0}) write$fb(r3, &(0x7f0000000080)="c716a6b80a6ef8d2dce6e312a3ad139ee6595c26e62fd2259c434edb2fbc4b42ee2f97049c41ebd3d5f68afa275d6107cf5fa7f99561b4fb094a47e82ea89edc27fc7a4046269ecba54d1462325a26750abf047fc93a25f449f91f7381ea10ce0446a64b28dad9e2f9eadc89bf51c9d8f0ede1e5d42ef009e9c8fc5ec29ad3c28a785cf31414e9829f6c04bf2d1ab4d169571939a4ebb708714eaf4761966edf9f5775256e26fedab26db08e8b22be23ac8ddfb5f2d333963beb5f65e87c3d45", 0xc0) [ 632.657238][T11385] binder: 11380:11385 unknown command -83099580 [ 632.663543][T11385] binder: 11380:11385 ioctl c0306201 200000c0 returned -22 [ 632.715492][T11385] binder_alloc: 11380: binder_alloc_buf, no vma [ 632.737495][T11385] binder: 11380:11385 ioctl 4008700e 80000001 returned -22 [ 632.771012][T11385] binder: 11380:11385 unknown command -83099580 [ 632.779562][T11385] binder: 11380:11385 ioctl c0306201 200000c0 returned -22 [ 632.781990][T11386] binder: 11380:11386 ioctl 4008700e 80000001 returned -22 [ 632.817667][T11390] binder_alloc: 11387: binder_alloc_buf, no vma 09:16:09 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r3 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000000)=0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:16:09 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 09:16:09 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xf4e83b670e211de4, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x60100, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r5) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:16:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r3) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r4) 09:16:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) [ 633.013352][T11404] binder_alloc: 11393: binder_alloc_buf, no vma [ 633.022916][T11404] binder: BINDER_SET_CONTEXT_MGR already set [ 633.035408][T11405] binder: BINDER_SET_CONTEXT_MGR already set [ 633.043348][T11404] binder: 11393:11404 ioctl 40046207 0 returned -16 [ 633.050848][T11405] binder: 11395:11405 ioctl 40046207 0 returned -16 09:16:09 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 09:16:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x408402, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 633.122407][T11410] binder: BINDER_SET_CONTEXT_MGR already set [ 633.146639][T11410] binder: 11395:11410 ioctl 40046207 0 returned -16 [ 633.172832][T11412] binder: 11395:11412 ioctl 4004743a 20000000 returned -22 09:16:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:16:09 executing program 0: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x11c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8a80}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x1) 09:16:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x11, 0x14, 0x76, &(0x7f00000003c0)}) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) [ 633.465888][T11424] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 633.478138][T11424] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 633.526048][T11425] binder_alloc: 11422: binder_alloc_buf, no vma [ 633.576343][T11425] binder: 11422:11425 ioctl 4b72 20000000 returned -22 [ 633.609434][T11428] binder_alloc: 11387: binder_alloc_buf, no vma 09:16:09 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xa9}) [ 633.682498][T11430] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 633.708241][T11430] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:10 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) 09:16:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='/dev/rtc0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) [ 633.756494][T11404] binder: BINDER_SET_CONTEXT_MGR already set [ 633.762505][T11404] binder: 11393:11404 ioctl 40046207 0 returned -16 [ 633.775279][T11396] binder: BINDER_SET_CONTEXT_MGR already set [ 633.783171][T11396] binder: 11393:11396 ioctl 40046207 0 returned -16 09:16:10 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x6341, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x102, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:10 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xa9}) 09:16:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:16:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x468402, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:10 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xa9}) 09:16:10 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 633.993854][T11444] binder_alloc: 11435: binder_alloc_buf, no vma [ 634.020951][T11444] binder: 11435:11444 ioctl 40082406 20000000 returned -22 09:16:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) readahead(r0, 0x10001, 0x9b5b) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 09:16:10 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) [ 634.290164][T11459] binder_alloc: 11422: binder_alloc_buf, no vma [ 634.320775][T11459] binder: 11422:11459 ioctl 4b72 20000000 returned -22 09:16:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xfffffffffffffff9) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = getpid() sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfe, {0x12, 0x1, 0x0, r3, 0x80, 0x9, 0x81, 0x0, 0x400}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20020090) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@loopback, @multicast1, 0xff, 0x0, 'veth0_to_bond\x00', 'veth0_to_team\x00', {0xff}, {0xbc318f0fa62a790d}, 0x5c, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x1ff, [0x1, 0x6, 0x0, 0x1, 0x3, 0x5], 0x1}}}, @common=@inet=@tos={{0x28, 'tos\x00'}, {0x1f, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@loopback, @private=0xa010102, 0x6d6d53687479e26e, 0xffffffff, 'batadv0\x00', 'batadv0\x00', {0x1fe}, {0xff}, 0x16, 0x2, 0xb}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x180, 0x180, 0x0, 0x1}}, @common=@unspec=@mac={{0x30, 'mac\x00'}, {@multicast, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x8, {0x6}}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x8001, 0xf1d, 0x1, 0x1, 'syz0\x00', 0x4}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x0, 0x3}, {0x3, 0x4, 0x5}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 09:16:10 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000380)={0x3, 0x1f, 0x0, 0x1c}) 09:16:10 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x4000) [ 634.554310][T11467] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 634.604770][T11467] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 634.679844][T11444] binder_alloc: 11435: binder_alloc_buf, no vma [ 634.686937][T11470] binder_alloc: 11464: binder_alloc_buf, no vma [ 634.691436][T11471] binder: 11435:11471 ioctl 40082406 20000000 returned -22 09:16:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x17, 0x0, 0x8}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10800, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 09:16:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=0x18) ioctl$RTC_SET_TIME(r1, 0x7001, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r5}, 0x10) 09:16:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x1}) 09:16:10 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) 09:16:10 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x17, 0xc5}) [ 634.818085][T11478] binder: 11475:11478 unknown command 64 [ 634.844237][T11478] binder: 11475:11478 ioctl c0306201 20000200 returned -22 09:16:11 executing program 5: io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) 09:16:11 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) 09:16:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x840) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) [ 634.893964][T11485] binder: 11475:11485 unknown command 64 [ 634.916023][T11485] binder: 11475:11485 ioctl c0306201 20000200 returned -22 09:16:11 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x1001, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="f00043950f1c84c941f900009ae98f0000ff00b9800000c00f3235002000000f30ea0930000003000f35263e260faeb7db9c27edb80e0000000f23c00f21f835020002000f23f8b80a0000000f23d80f21f835c00000000f23f80f13bd252cd204", 0x61}], 0x1, 0x20, &(0x7f0000000100)=[@dstype0={0x6, 0xb}, @cstype3], 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x7001, 0x0) [ 635.156949][T11496] binder: 11495:11496 unknown command 8 [ 635.190026][T11496] binder: 11495:11496 ioctl c0306201 200000c0 returned -22 [ 635.210448][T11498] binder: 11495:11498 ioctl 8138ae83 7f1e5f323830 returned -22 [ 635.236404][T11496] binder: 11495:11496 unknown command 8 [ 635.237968][T11498] binder: 11495:11498 ioctl 8138ae83 7f1e5f323830 returned -22 [ 635.251951][T11496] binder: 11495:11496 ioctl c0306201 200000c0 returned -22 [ 635.346746][T11470] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 635.385315][T11470] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ec124390"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) io_uring_enter(r3, 0x0, 0x10001, 0x2, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:16:11 executing program 5: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) 09:16:11 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) 09:16:11 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) 09:16:11 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) r4 = socket$inet6(0xa, 0x0, 0x7ffe) fchmod(r4, 0x41) getsockopt$inet6_buf(r4, 0x29, 0x14, &(0x7f0000000100)=""/66, &(0x7f0000000040)=0x42) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000240)) 09:16:11 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000810) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) 09:16:11 executing program 5: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) [ 635.707152][T11515] binder: 11511:11515 unknown command -1874652436 [ 635.714931][T11515] binder: 11511:11515 ioctl c0306201 20000200 returned -22 [ 635.724892][T11516] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 635.738289][T11516] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 635.753444][T11517] binder: 11506:11517 ioctl 545d 0 returned -22 09:16:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) semget(0x1, 0x0, 0x400) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000002800)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002740)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd, @fd}, &(0x7f00000027c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x2, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e22, 0xb77, @ipv4={[], [], @remote}, 0xffffffc1}, r5}}, 0x38) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20, 0x0, 0x1, {0x0, 0x10}}, 0x20) 09:16:12 executing program 5: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x30b}) 09:16:12 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="056304400000000000634040019c22fcb32f1d67c954dcf5f49b36117611d2a00792bad5c55497640ea05c4b64ce6d33c0b89b7bd9f92c90934de8b4479a07e2f1ee6a8538d02f65b0a287114f4a6db3aab53ab68908e5f2093ef0a0b70def9881b35525d46f2daa5c6cb1f6baf48ad2354fc45d081614d9f2159cc2eb52155321e318d30a7e9c02656adb6059c770a802df3a8f51c090bf470474b54f721e7b45f5b2b8d00560b60d65651382dc4fab5ff479151008ce80bf"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000280)="bee5bdea82d79774ace07f04e60bce63c55ed5b8fc0ac8697b6203ebe0b88741103b74575cc61d73b0bb74063175ba699d38d01a788a36c21f5b65778ada3813d80ecbb66b2cb391d87f37855a3b64d0587cb54050f84a838d89d135647ae36a8375a5ea7e9eea15331a41b0af80c82d46b2aab7d6e7337603d6894fda7243a682be9e7c0e4e5a073cbcba6c75f4b7c38727ee9994c1d83d11dd991ee7a7f7ec68902d2385f8586fd14dc0e69829994233cc4092581f44ce3e95248a2a01832ffe3ba47ef14649a9838b167c05370a133215627cf35ee398e1271fe0e350877c09b16207e5e6d0086a86fde0075c2d146a3ac5f19c4c0101c3d442b81cf495243d6c1eeceef472985e20784aaf04608a14dacba73eac0286c7710c8652c03a5bef750249888d279f8936d8d95392597f1900153350afdac71c1c2c75eebe915050d61dd113169864e84465141db2138a4eed264872cdd5e0f8cd8c02a8a745a0eeffc2f9924300f0b5ff57a92aeb82b9682d8cc34be1c57539ebe0c898719b1064c3a4b54835c6e14faaa08427fbd8857b592f18f594b335e9f5dcd07860058a7fac930a87fb6ae05ed4277b1921d3971888449b993c04a72de075c6d613f1b8ff3441871264a67ac4b5d58e0457e2b81ba5028af0dda22a62ff42880ee2314271f7e9b2115a704645af25bfa9e5c98425d2319d3d7d0575862acc4616e66ec45a155ab852d18f11d00c6dd2dffee89b6b56c61fd04dcd80d190190001369164e4801f3c0d0db674e3ac8e2699981181612b307a3ff60eda311fcd9467e7bcb76b201905f3b4ee3f6f2437dae5630b8e8296d5a331e73e860a138d324a98b1d1700bd8a91f094182c177d1730d770a0afec3b7be045aad7c52b9ea3762b22c92f4dc85e98a68557631aef1123d52db384834dd1d407ef7e63cb5222a5e600fb094470f9a44a8268bb5207b360cdc315e0735ede402d27ef8692f098bf5fd8b560dbd73c33a835137c26e9125469f40376aa9ec176e45daaa504e04b00048fd6476b92111d94be5dfe71c6cb77dc5a5b96960907d73ea978124decd0d66a1d1311552f6b79695edd7c34611656faf28a1909aa7b3d897a0cea6f59797d4632de7d610d4b7651af6510be80d1e370b4ac47a47fc129af1a5989b038d727621141a33c333156110fe79612effd5f195fb26f23111b551f4b5b213b1dc54ce7b8749faa183c397a4809ca7835e3d37aa23c5ac3bb31656228f08f3cdfd243447d2fa80010d404c2cf936b22b923dcabb3245920a10d698652f72925e23e0d1cfa32b0f6505f033d9e3df2aa1c93fdd71eb5d9ebb8f826819891e59422324dd527c1f5ec92f7f2803c234f7c0d8347677b6f3849a81bea400f98a23a2372996e1afa4fb0e5f344d35272a54f0d22cacd9ce78bea6d116a68d80cfd4c3ede417824f2565fd6b1779decaf5554b59e72e3a39eaba59ee8ff39a3d1ab8380ce778616827d6d221ba187f1164837c839beeb71b488cd99bc495084459504e711b00684dbcbb64f90e6c0b37ea47c1c2375740a53aec64607093678684a42e7416bc5f5a553c4cea6387e10586be8084bb52b716f39fc0c053106424522dc0835f74c80f0746cb77c1230d9773b582f397bc45c93425b17b4c365b072a557fc0f92486739e65ac0f038a87a49e96ca380943dc5d26c2e40937d87260eef3b8d414d88e435b697665af8ca99b4a962bb5309ce85d7be3168833d9d57f15ede1f73be6a20aaad00a830b26f9762a3915b4757b711af7d9d92c9fb3441c63df761b318dbb8963bfce4115becc1936f050faf9c049e1565a53e16ee9f8d633255fd74fe5b99047a72d1c281345d1ff89495d5387b898d2d1c2ea9000f32962b3882d84e4ec1c9201adeb750f7be82c76bc05eee0a621b71c4ce26df8038d5bc915ce29d82871ba8ce31cf706813e49cbb593e4c5e400eaefe400c3fa27b0ac7b5518591f7f9fed037378266d07b5303b3bdfba6bbe8c8a4f43dd12b2c8a6327642f46ab8d15ffcf759c7dc5d35d568595555b18f20ad65cf776161f7403ab84f721e0785cb2558c745a8a0dc580e077151f60bbefb54ef971d8cbcd21cb28f17944fe9786fe2dd7cf156d55fd30c32407f1fc2f719e89db4e1e01c71556b09895df585441f9d295ddfca607997244705a9b6f9a37819271f4f51a92f48eb72781374d84b3c683f2089d30971ac2ccef4fe944dc79bac15e128ebc1290dd0f5a1c073f434365d94e131f637c6271d7e5385b4d95db265db38d3c49102904bbdf063a01d7130cc87b487635b4cc2f9e3a723fdfc6312122b147a731091449cf781d79c0c452d0cd6bd119e18420c8c3429fef107103ac82cc79e380e2fb261067eac56e023b97b48ef4851491deab3edf3387a4baa5e0b4c6058ca5b43e3ba7997ce6b1111e976e9b2badae943fdc6f939d42e71bf9bbec4188898b90500aa3cc8f4b16ad4ce039bbb0edeb0c9698f68110b2b0c2e41a3088ff83e8d3167fd61b2017944486ab74e49c3e46ba416f401d3c1663962a2455f0d6716a2d2d9851700dabd8f87e7d4839e84ffdd53cb92819e2e4410c0a8b84c55a9bdaddff1c11aafec397bf0d1457d20653412bb9f38090a5635ef664e2d366d0dd1aa7ce38bfdf56fb74194e61525a97ae9825e1bc63b0dea5c6166538726db96f54d5322f61f427e72e2b5f45aba5931a3865563432641df2b23c4de00de99a7a29e0b6c6e40bc5683d5f32cccc9d9b313478917dfd7c2849a378745709794d1b64a4daa467c03c26252741c18982f7d50d1dd822c852e2bb331f611d365ceb27dd511f3a9424e512d4df05e89c13891af06c1bb31e677a7af1c29615952de982190796f9c06ab0676e4de8e3d9b6256d59bc206d057b707b20864f6cf87c5ab25dcacdece4474f2c9eb0487fa0da4b507f2fbe1e0f669f6e57c8adcd66ba02b40d1fa065aaa16ed18bc7fa386353dac7f1d80eb24029aceae3094d96ffa5e0182a56827a8c16600dc7a0e03778b15376e4a41a02a90a7ab685abaae0e3474fb2318ca4a8e3f4f81c3a89ecf92a8b0ae9f67f980f0eb1dd7cc397d62093be345f2cc932558e5e7b4d35f5a2272e20f90df68c629eac2c6712fe0885807049d9e4515d8d5d4cf3a63a10c6753cd241ff82d020c478ded9f00bec56587482c13a28de1157979ae5dcb37f85f03e891776ccabfe29d27d24140593e87b88a5160709fdeb922c1af92ce88d3d5a4a9489b30e23e7a2c5d8f3f25522143eada9ef42cb2197e7c7f67262219c3f1dadf8141a09568da73d70718a2638887c24c13953c6f0df3a61ea8eb1a61ba4b8e77927a7edb0a3b8a6e6cb641fa47fd23ab152d7b39b0847e4dd6031313f79a4c27b9bd426d26bb5c297c82cd393e1d536285f22cda4023c7b82a6a643bef418e31acb974d977e35dcc2c6e93928451561ce8526d5b7f59bb9aa0d75652bc0bc3df2aa11857ae6ccb2f633c1da33aae8758dff0e13a5b4c5127df317db3c4c79d7eb17f8620a4319f10e2b997c4075fef79a9ba154681250366d06b11e374b9bf42a25db729e24559a0ba8e88effbd75fe18139190bd62b51dde429c4164d6b5382640473b829f698f984332d050f19453c3e1a517a30e9c1a96052a178c73e5b820a1b44fe8f9bab02ae92d9540fd5c540ad34be76a65b83b5265946ef54e7118484a4454330c9248c96509a378b1ba5e0562a9b0f5479d79019722c26d8d53bbe0d6c0217fcb754d504deb61c77ed6ad3ec64e31f19058aa09d6f4cb93dc61760063bfa1fd52104bd212150e1c6cc18fad1d7f946d37d3e08e21a864f1227d88b5995d18adc6a7dbd346f8586e7957abd3d2b23bebfd5158c95631897b13d26136e175e2b7cfc76e2ce8b99d86d72d5d2f3ada29febeec0de5f647d3f62d7f2972a575a7d3f0116ee84a8384b61d7c3fb25e75083bd089e3f876f62e8491e4942f1121982d1001513a35658a49fa673581f024a8991fecb6834e7d5396d63e66a5b374754877877ae48611066dd4e878896ada9261308155a5f79c9d1b312be57b81aff7d58448356f667b285770d7263e5f54423fc528bd41f64d86e0c30c5ee7b860dda8a81d767cf3ec54d69c3b0dab23a1e1c967836bbfb26f7790d52ccec148cf94bf98cdd92b940d2d54100122bf643aa08137c40aca93c830a2d5444ab744fb304815decaabe2414ce4d35d3eeb8d5ce820f5ab754c148827d2133bd337b80984a791cfe920f639c57b5049fac059bf19e4f43b4a14d33c6891afca4828b67861a8349baec4df3f60191b8f3daea97b3dad6fb9cb6c5dafaf45624b7ed9d3d3ffef08937017ba4129c97d1762932d24c74ce2327f54421091c6b3d2425d8a623eebb300fad22cbacdc985cdd8f25717dc87a8adf481a5a45851f9d9029e64dd68b6b6da8d0e8e768c5a913f44090d126d5a9a922687fba7e00f0cb8fd76859ae6e1a954c0f084c6ae887526c0408cd013ec34b2a37b970b68c8bc545bbf6f738adb7417ae54ed57b064fd3927a20d2039fa77d4104ec002f27bc538497cf3b87dad13709d6fc44740e26d2349ad60f5f087d59ee051deb4aeda488f3e15abbedcb396330bb337764fa6a8b07a9985ea0b24f04bd9b015c1cd91dcc65a6e800bac7c05301d5c29d158c5533f6755a85ad5a98c1519c06d442092869444c6fbb228f4454b9d1264b61e28ad1e2f419c0fbffd30616cc64943cc4d9bde4e54190fec9714505f680ddf9778f410f17d27b450fdc7b0f6f119f0b0eb38bf407e780eebdca907863f052a5a65ce299b61036d1949309ac303f4bcfb1e3f255e552a954f7d6bfbcc6bed85e1da66424afd9b2e33f6de5fd80f7dd86d84b6ebdc83b502288b63bf97399cad794db124edb689f1d4cb6cd9cda5e17a72e190d2a4a951f505be42bd4376b9f85a7342fb66a8d145f832d5c0c283ad5b2813eebc0b021e3eae98954c1bd44e338b4b05562a61b79d78343701f2ce22af0724c37771b3692a99a3e2c9676dbd4315dda30f85be99208cd4400ffaa1245a842e099de6bc50e892fb8846c10c01ba28f3efc57fd223e3e31eafca97a19a8c8821647055d75b20b751bd298262f01ecf1c9796aea80322f4d0c25e652294666137333c49b7e5995c95896685c6207a09cc7a765de9e9b5bc4b866473e3deb47fcca13d036f44f35c11dcb0a28d452e767835a1c87b89e1e231afeb400e7c7f5ca5aca89fc56fda09e707d92204ca3ba1f3528fde339b8199c12968414cdde4ff7326c3c34293f2b88b95f9d84c1c7dd50420d4dbb1cbbf5fa05069354f2e99f7673c4061ec33b837919796c1475a5be39d3aaefc97d2222ad34b48c7b2efb70c47af610589d54278fc4be556d015d314046dfb197ee393251187f3083760bfbeeb05fc7c896706dda054dd6fcee8654ce141533b47a25160789a68989fb0b08461832ddb2b8100977951ab8dcf17ea2330e1df09dbb16645a7ad86e99824cdb09be2e1f52ea3bfaf0a00dfba9f03ed2bc4769a91f202cb42d8aaa336f30a510c8060bf3d59ac12b9f1971386d8a9fcdd1cdad08eaf7f04e09c733976fbc1116c125673f5d18b6678f6820f434dee13e840c6ae15c779c0d7c1a7feca3bf58b26eaa292fe5642775e32c8bf974667384acdacb234c6bfad3bf92658fdccf9179c14397f29f6571b3cbb9c1cc522c500745da9774e0d0a67bf05e17fa64f2fb7d09a791732a19a0aad8e92e272545068f4bd7c8d279f8bba0de5c6198b385a88c4a4d712947b6", 0x1000) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r4) 09:16:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$cgroup_type(r2, &(0x7f00000002c0)='threaded\x00', 0x9) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000580)=[@register_looper, @reply_sg={0x40486312, {0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x100}, @fd={0x66642a85, 0x0, r2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x400}, @acquire={0x40046305, 0x2}], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000007e44560ea4b3c85aa5ed7800000000001c00128009000100626f6e64000000000c"], 0x3c}}, 0x0) getpeername$netlink(r4, &(0x7f0000000300), &(0x7f0000000340)=0xc) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$kcm(0x2b, 0x1, 0x0) ptrace$peekuser(0x3, 0x0, 0x7c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/24) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x8, 0x9, 0x0, 0x2}) 09:16:12 executing program 5: io_uring_setup(0x730, 0x0) [ 635.995159][T11530] binder: BINDER_SET_CONTEXT_MGR already set [ 636.006696][T11530] binder: 11526:11530 ioctl 40046207 0 returned -16 [ 636.063466][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 636.081749][T11535] binder: BINDER_SET_CONTEXT_MGR already set [ 636.088098][T11535] binder: 11526:11535 ioctl 40046207 0 returned -16 [ 636.099659][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 636.458247][T11517] binder: BINDER_SET_CONTEXT_MGR already set [ 636.464575][T11517] binder: 11506:11517 ioctl 40046207 0 returned -16 [ 636.493698][T11542] binder: 11506:11542 ioctl 545d 0 returned -22 [ 636.509422][T11520] binder: 11511:11520 unknown command -1874652436 [ 636.516205][T11520] binder: 11511:11520 ioctl c0306201 20000200 returned -22 09:16:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000, 0xffffffff}) 09:16:12 executing program 5: io_uring_setup(0x730, 0x0) 09:16:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x1, 0x9, 0x8}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a62772cfc6c98704b1c761aa1b6460000000000000000000000000000000000100000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='/dev/rtc0\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="062d0000"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xe4, 0x2, 0xfd, 0x44, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x801, 0x9}, 0xc, 0x1ff, 0x80000001, 0x4, 0x9, 0xfffffffb, 0x5}, r1, 0x800000009, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x0, r1, 0x100000001) 09:16:12 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440a059d270fee573a318ea"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 09:16:12 executing program 5: io_uring_setup(0x730, 0x0) [ 636.667076][T11551] binder: 11547:11551 unknown command 11526 [ 636.699954][T11551] binder: 11547:11551 ioctl c0306201 200000c0 returned -22 09:16:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3}) [ 636.731057][T11557] binder: BINDER_SET_CONTEXT_MGR already set [ 636.747909][T11551] binder: 11547:11551 ioctl 4008700e 0 returned -22 [ 636.755307][T11557] binder: 11548:11557 ioctl 40046207 0 returned -16 09:16:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x16, 0x0, 0xc5}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000000)={0x7, 0x2}) [ 636.794882][T11561] binder: BINDER_SET_CONTEXT_MGR already set [ 636.825667][T11561] binder: 11526:11561 ioctl 40046207 0 returned -16 [ 636.829700][T11558] binder: 11547:11558 unknown command 11526 [ 636.839510][T11530] binder: BINDER_SET_CONTEXT_MGR already set [ 636.847847][T11563] binder: BINDER_SET_CONTEXT_MGR already set [ 636.850255][T11530] binder: 11526:11530 ioctl 40046207 0 returned -16 [ 636.854780][T11535] binder: 11526:11535 ioctl c0306201 20000540 returned -14 [ 636.873856][T11558] binder: 11547:11558 ioctl c0306201 200000c0 returned -22 [ 636.888249][T11563] binder: 11547:11563 ioctl 40046207 0 returned -16 [ 636.899090][T11551] binder: 11547:11551 ioctl 4008700e 0 returned -22 09:16:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) 09:16:13 executing program 5: io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x30b}) 09:16:13 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4) 09:16:13 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x1, 0x0, 0x3, 0x1c}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000480)={0x18, 0x0, {0x4, @remote, 'veth0_to_team\x00'}}, 0x1e) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) getpeername$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf0, 0x12, 0x2, 0x70bd25, 0x25dfdbfc, {0x1a, 0x9, 0x2, 0x1, {0x4e23, 0x4e20, [0x5, 0x744f, 0x5, 0x7], [0x6, 0x4, 0x81], r6, [0x3f, 0x8]}, 0x7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "460588f20bd3bf5e5d54de3ca4146feeb64f0834e53ad8d82ca5f697f2a0e0fdc8e36c79f26b55ac379f1190cbcd8e3c380c1e36c786c8a83be3ed43edb0fc4865344131bebf2cdc4dbc1545cfacd1e24d2e4aa6a065485b630a50f1b321155fad9b32ffe64349f6f6ded2ffeea1234bb48eb53be7ba2cd8136df02c3f9e0bdfb4a8a7af131430dc3df9f9ea75edf1e0e2a487139517d1bb93d4792a20d72634"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) [ 637.025144][T11573] binder: 11569:11573 ioctl 4010aeab 20000000 returned -22 09:16:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) fcntl$setpipe(r0, 0x407, 0xf9) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x6, 0x0, 0x1f, 0x0, [@remote, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x34}]}, 0x38) 09:16:13 executing program 5: io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x30b}) [ 637.144208][T11585] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 637.163673][T11586] binder: BINDER_SET_CONTEXT_MGR already set [ 637.182863][T11586] binder: 11576:11586 ioctl 40046207 0 returned -16 [ 637.198609][T11585] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:13 executing program 5: io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x30b}) [ 637.328298][T11586] binder: BINDER_SET_CONTEXT_MGR already set [ 637.334322][T11586] binder: 11576:11586 ioctl 40046207 0 returned -16 09:16:13 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) connect$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff, 0x1}, 0x20) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x4, 0xfd, 0x1}}, 0xa) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r4) [ 637.488844][T11552] binder: BINDER_SET_CONTEXT_MGR already set [ 637.500608][T11552] binder: 11548:11552 ioctl 40046207 0 returned -16 [ 637.511331][T11606] binder: BINDER_SET_CONTEXT_MGR already set 09:16:13 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) 09:16:13 executing program 5: io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x30b}) [ 637.575815][T11606] binder: 11548:11606 ioctl 40046207 0 returned -16 [ 637.667887][T11614] binder: BINDER_SET_CONTEXT_MGR already set [ 637.685102][T11614] binder: 11611:11614 ioctl 40046207 0 returned -16 09:16:13 executing program 5: io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5}) [ 637.738688][T11573] binder: BINDER_SET_CONTEXT_MGR already set [ 637.744700][T11573] binder: 11569:11573 ioctl 40046207 0 returned -16 [ 637.767920][T11620] binder: BINDER_SET_CONTEXT_MGR already set 09:16:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) 09:16:14 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pause() r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x2, 0xa, 0x4, 0x0, 0xffffffff, {r1, r2/1000+60000}, {0x5, 0x1, 0x4, 0x8, 0x5, 0x9b, "e2ff1b89"}, 0x1, 0x1, @userptr, 0xe8a, 0x0, r3}) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000100)) [ 637.795515][T11620] binder: 11611:11620 ioctl 40046207 0 returned -16 09:16:14 executing program 5 (fault-call:0 fault-nth:0): io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5}) [ 637.927987][T11588] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 637.952701][T11591] binder_alloc_new_buf_locked: 7 callbacks suppressed [ 637.952710][T11591] binder_alloc: 11577: binder_alloc_buf, no vma [ 637.981943][T11588] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 638.007164][T11594] binder_alloc: 11587: binder_alloc_buf, no vma [ 638.026935][T11633] binder: 11623:11633 unknown command 2 09:16:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 638.045204][T11633] binder: 11623:11633 ioctl c0306201 20000280 returned -22 [ 638.053551][T11634] FAULT_INJECTION: forcing a failure. [ 638.053551][T11634] name failslab, interval 1, probability 0, space 0, times 0 [ 638.079496][T11635] binder: 11623:11635 ioctl 4600 20000140 returned -22 [ 638.111691][T11634] CPU: 1 PID: 11634 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 638.121610][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.131671][T11634] Call Trace: [ 638.135004][T11634] dump_stack+0x188/0x20d [ 638.139347][T11634] should_fail.cold+0x5/0x14 [ 638.143952][T11634] ? lock_downgrade+0x840/0x840 [ 638.148811][T11634] ? setup_fault_attr+0x1e0/0x1e0 [ 638.153855][T11634] should_failslab+0x5/0xf [ 638.158280][T11634] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 638.163660][T11634] ? security_capable+0x8e/0xc0 [ 638.168563][T11634] io_uring_setup+0x1260/0x22b0 [ 638.173521][T11634] ? io_sq_thread+0xbe0/0xbe0 [ 638.178189][T11634] ? wait_for_completion+0x270/0x270 [ 638.183472][T11634] ? __this_cpu_preempt_check+0x28/0x190 [ 638.189097][T11634] ? __sb_end_write+0x101/0x1d0 [ 638.193969][T11634] ? fput_many+0x2f/0x1a0 [ 638.198327][T11634] ? trace_hardirqs_off_caller+0x55/0x230 [ 638.204052][T11634] do_syscall_64+0xf6/0x7d0 [ 638.206550][T11639] binder_alloc: 11637: binder_alloc_buf, no vma [ 638.208559][T11634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 638.208574][T11634] RIP: 0033:0x7f655cbe8469 [ 638.208590][T11634] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 638.208599][T11634] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 638.208615][T11634] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 638.208624][T11634] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 [ 638.208633][T11634] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 638.208641][T11634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 638.208655][T11634] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 09:16:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x33}) 09:16:14 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x400, 0x0, 0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000002c0)={0x1, 0x0, 0x7, 0x0, 0x6}) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0)={'syz0', "77f2f26f4aa45c19f6ea68427d924996d85797"}, 0x17) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') 09:16:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05634000000000006340400100"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0xba6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x8008700b, &(0x7f0000000380)) [ 638.462878][T11620] binder: BINDER_SET_CONTEXT_MGR already set [ 638.489456][T11620] binder: 11611:11620 ioctl 40046207 0 returned -16 09:16:14 executing program 5 (fault-call:0 fault-nth:1): io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5}) [ 638.509536][T11622] binder: BINDER_SET_CONTEXT_MGR already set [ 638.512031][T11647] binder_alloc: 11643: binder_alloc_buf, no vma [ 638.533508][T11622] binder: 11611:11622 ioctl 40046207 0 returned -16 [ 638.619238][T11651] FAULT_INJECTION: forcing a failure. [ 638.619238][T11651] name failslab, interval 1, probability 0, space 0, times 0 [ 638.640442][T11651] CPU: 1 PID: 11651 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 638.650786][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.661973][T11651] Call Trace: [ 638.665275][T11651] dump_stack+0x188/0x20d [ 638.670054][T11651] should_fail.cold+0x5/0x14 [ 638.674845][T11651] ? lock_downgrade+0x840/0x840 [ 638.679705][T11651] ? setup_fault_attr+0x1e0/0x1e0 [ 638.684846][T11651] should_failslab+0x5/0xf [ 638.689284][T11651] kmem_cache_alloc+0x29b/0x740 [ 638.692646][T11653] binder: BINDER_SET_CONTEXT_MGR already set [ 638.694169][T11651] ? security_capable+0x8e/0xc0 [ 638.694196][T11651] io_uring_setup+0x345/0x22b0 [ 638.694217][T11651] ? io_sq_thread+0xbe0/0xbe0 [ 638.694235][T11651] ? wait_for_completion+0x270/0x270 [ 638.694251][T11651] ? __this_cpu_preempt_check+0x28/0x190 [ 638.694270][T11651] ? __sb_end_write+0x101/0x1d0 [ 638.710327][T11653] binder: 11623:11653 ioctl 40046207 0 returned -16 [ 638.714592][T11651] ? fput_many+0x2f/0x1a0 [ 638.714611][T11651] ? trace_hardirqs_off_caller+0x55/0x230 [ 638.714637][T11651] do_syscall_64+0xf6/0x7d0 [ 638.714659][T11651] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 638.714681][T11651] RIP: 0033:0x7f655cbe8469 [ 638.762064][T11651] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 638.782803][T11651] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 638.784899][T11633] binder: BINDER_SET_CONTEXT_MGR already set [ 638.791223][T11651] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 638.791233][T11651] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 09:16:15 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xc, &(0x7f0000000100)={r4, 0x40}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x20f, 0x6, 0x1ff, r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x4, 0x2) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000580)=""/90) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000042cc0b5a5200b5ad52bf000000000700", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000800010068746200240002000800050000000000180002000300"/56], 0x50}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x2fc, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x10, 0x0, 0x1, 0x3f, {0x4e20, 0x4e23, [0x7, 0x2, 0x80000001, 0x1], [0x5, 0xb241, 0xfffffff9, 0x7724e924], r9, [0x3, 0x9]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "044ff8b446b3ff6f3a7adc316c54fb526f7c75885e62"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "dd950918144fe46a81e4557eb2bd12068bece9883bb8ff5b0bd59633de9946b77906858b609916b39f20e70da88f6d395dc2e83dcd5898cec6dfc4dd32ce03e71c5966dc04786cbaaa3644357b3279520b2b1bf49dceb0c1be98a55c7f565ff96c3b3f24ba3060450e5ff4e976d7cf481026ad1255207a80ca5e52d589ac439a2ea25af41b0585ca50e2968c40e5efa828285ad699b6d275fbfd172f8ff030b92ba7cc7e7e37922f27495093ff2f5cbc7d21431bb0eaee0b3f35b486b9b0f5d83e63b02accdf96602cbc"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "49d3e8777c23bc219b9de36d6ecdc4e40dff6ea7ee2182d639437e50e30104ded944d1fbadf68f91c42c56f22a5ef3a8f0cae6d7886d97773e6fbc692e3eaf69ee943d"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "a640b6ecaf146839fc33d7fb776fa54c9e065eaec63d19a0acf3235000f7e1621387a51cd286def6120e06af2fdbc67bb1c6eb8d65d84338e704863df74b2aa1aa7988287236e69770f6547dc33fca9b8e5db60152d7998b10d7"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "a583bb4f02bac2b1015f74f22a4aa6d5dd31397546fbcc74ea5bc5b1aee28776b2124df8a6cdf8850239c0d0345831521eca006c523e99780149279fffb645e41dd3fa8eb0611861d36396544b87aedfec00fdb35879c1adad3dd2bc94a992084c60530720c60857904b6bde1c0786716bdb006f2846cc4e184173fc83dd7e49d202cd073456e199a6c7ad80199d2814ddbd92f9b82b5c4a7c5e84b9a2abfbaf88898f91a53eda3bc9eecef7afb36331907af5f8367168d31eac3c4866193d888c0919a248e50538c5c3f77349b53d94"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "f233f1"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "2940a94dbe1a2fb6d841ff18d52161cd0ef7282c463a78c1d381f9310c7d1e4ba031c13b50480a51a0109b372b66e37b97b7b22b4abd3c17849a"}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) [ 638.791241][T11651] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 638.791249][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 638.791257][T11651] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 [ 638.857282][T11653] binder: 11623:11653 unknown command 2 [ 638.864063][T11658] binder: 11646:11658 unknown command 4219653 [ 638.871493][T11657] binder: 11623:11657 ioctl 4600 20000140 returned -22 [ 638.876605][T11653] binder: 11623:11653 ioctl c0306201 20000280 returned -22 [ 638.883013][T11658] binder: 11646:11658 ioctl c0306201 20000280 returned -22 [ 638.922195][T11652] binder: 11646:11652 ioctl 40045532 20000000 returned -22 [ 638.960198][T11662] binder: BINDER_SET_CONTEXT_MGR already set [ 638.972262][T11663] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 638.977626][T11662] binder: 11637:11662 ioctl 40046207 0 returned -16 [ 638.989205][T11633] binder: 11623:11633 ioctl 40046207 0 returned -16 [ 639.003679][T11663] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:15 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 09:16:15 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5, 0x0, 0x9e, 0xffffffffffffffff}) 09:16:15 executing program 5 (fault-call:0 fault-nth:2): io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5}) 09:16:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) pwrite64(r1, &(0x7f0000000080)="b6f44f743e6952d199dbafcdf0b7af0ab45014879a0e496014ca6c11ff385260f9ab8ff79d3e60a62708e686d45ac11216fb1bd3d5de2e37be933acc0fe08c73a75392309795ce16f978", 0x4a, 0x80000001) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) [ 639.240830][T11647] binder: BINDER_SET_CONTEXT_MGR already set [ 639.251430][T11647] binder: 11643:11647 ioctl 40046207 0 returned -16 [ 639.352607][T11678] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 639.354807][T11676] FAULT_INJECTION: forcing a failure. [ 639.354807][T11676] name failslab, interval 1, probability 0, space 0, times 0 [ 639.364081][T11678] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 639.378224][T11661] binder: BINDER_SET_CONTEXT_MGR already set 09:16:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 639.415805][T11661] binder: 11646:11661 ioctl 40046207 0 returned -16 [ 639.423052][T11649] binder: 11646:11649 unknown command 4219653 [ 639.442495][T11652] binder: 11646:11652 ioctl 40045532 20000000 returned -22 [ 639.455316][T11649] binder: 11646:11649 ioctl c0306201 20000280 returned -22 09:16:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b630000948cd2bd4ecdee9a58c220e58944a4ccf66113830467a9cb36ae94cf529a5c8a4c40f66542ab20c61b51614830b903fa711f176dc3f9ab64b9bbf4645a5b4f6d7817746432027066e02d6834ea1360b2b74cfe9bfa635e41720bf239ed635ae894e11ae68bd8b27f7aafaf8a6f1522d5ef087e9935a7d92db46dd7a1f04c2a5937113c77f6ea73ef5b8efe7a72da2859f1f1d7189fc7dec865fd1591681faaa249011b2d9f6e"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000000)={0x2, 0x5, [0x4, 0x2, 0x2, 0x4, 0x7], 0x7}) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 639.505661][T11676] CPU: 1 PID: 11676 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 639.516183][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.526332][T11676] Call Trace: [ 639.529645][T11676] dump_stack+0x188/0x20d [ 639.533986][T11676] should_fail.cold+0x5/0x14 [ 639.538584][T11676] ? lock_downgrade+0x840/0x840 [ 639.543443][T11676] ? setup_fault_attr+0x1e0/0x1e0 [ 639.548489][T11676] should_failslab+0x5/0xf [ 639.552914][T11676] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 639.558290][T11676] ? kmem_cache_alloc+0x358/0x740 [ 639.563322][T11676] ? security_capable+0x8e/0xc0 [ 639.568278][T11676] io_uring_setup+0x3b3/0x22b0 [ 639.573053][T11676] ? io_sq_thread+0xbe0/0xbe0 [ 639.577741][T11676] ? wait_for_completion+0x270/0x270 [ 639.583032][T11676] ? __this_cpu_preempt_check+0x28/0x190 [ 639.588667][T11676] ? __sb_end_write+0x101/0x1d0 [ 639.593533][T11676] ? fput_many+0x2f/0x1a0 [ 639.597871][T11676] ? trace_hardirqs_off_caller+0x55/0x230 [ 639.603617][T11676] do_syscall_64+0xf6/0x7d0 [ 639.608152][T11676] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 639.614043][T11676] RIP: 0033:0x7f655cbe8469 [ 639.618463][T11676] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 639.632209][T11685] binder_alloc: 11682: binder_alloc_buf, no vma [ 639.638072][T11676] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 639.638088][T11676] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 639.638098][T11676] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 [ 639.638107][T11676] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 639.638116][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 639.638131][T11676] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 [ 639.735855][T11677] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 639.763955][T11677] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 639.776945][T11688] binder_alloc: 11684: binder_alloc_buf, no vma [ 639.814403][T11688] binder: 11684:11688 ioctl 5434 20000000 returned -22 [ 639.976509][T11679] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 640.012814][T11679] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:16:16 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000040)={@in={0x2, 0x4e22, @empty}, {&(0x7f0000000280)=""/4096, 0x1000}, &(0x7f0000000000), 0xec}, 0xa0) dup2(r0, r1) [ 640.130050][T11693] binder: BINDER_SET_CONTEXT_MGR already set [ 640.142343][T11693] binder: 11692:11693 ioctl 40046207 0 returned -16 09:16:16 executing program 5 (fault-call:0 fault-nth:3): io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5}) 09:16:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x2, 0xffffffff, 0x400000, 0x8, 0x0, 0xc5, 0x4}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78) [ 640.225634][T11695] binder: BINDER_SET_CONTEXT_MGR already set [ 640.252048][T11695] binder: 11692:11695 ioctl 40046207 0 returned -16 [ 640.318681][T11698] FAULT_INJECTION: forcing a failure. [ 640.318681][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 640.341332][T11685] binder: 11682:11685 unknown command 1077936176 [ 640.354433][T11685] binder: 11682:11685 ioctl c0306201 20000280 returned -22 [ 640.385656][T11698] CPU: 0 PID: 11698 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 640.395586][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.405732][T11698] Call Trace: [ 640.409030][T11698] dump_stack+0x188/0x20d [ 640.413373][T11698] should_fail.cold+0x5/0x14 [ 640.417978][T11698] ? lock_downgrade+0x840/0x840 [ 640.423189][T11698] ? setup_fault_attr+0x1e0/0x1e0 [ 640.428262][T11698] should_failslab+0x5/0xf [ 640.432686][T11698] __kmalloc+0x2d9/0x7a0 [ 640.436938][T11698] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 640.442490][T11698] ? io_uring_setup+0x44a/0x22b0 [ 640.447433][T11698] ? security_capable+0x8e/0xc0 [ 640.452309][T11698] io_uring_setup+0x44a/0x22b0 [ 640.457094][T11698] ? io_sq_thread+0xbe0/0xbe0 [ 640.461777][T11698] ? wait_for_completion+0x270/0x270 [ 640.467064][T11698] ? __this_cpu_preempt_check+0x28/0x190 [ 640.472699][T11698] ? __sb_end_write+0x101/0x1d0 [ 640.477567][T11698] ? fput_many+0x2f/0x1a0 09:16:16 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1e, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES64=r0], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440000000000063404001d4712c7b14542b80ba0ecb1165375fe0062756864a02254609eb410897d8a2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000010000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000400000000000000852a000000000000e2e6f475a191f215fd13976bcc7329101abb524e9c8bfa4017935ce90b8bebf31541ab8494626fb85a019c86c791855e5bed794b2529a86a9e8a821ddd7c7aec3bccb336d50662e2ffc2fb8df2e83267e68c010e732bb3bf3de345d54c1b930a068e076cd12c309b8e72d21362f47dcbe0e5d191b3b1d2f5dbaba9fe2de0a429acfc10560c76ec261e535e82e65be8ba74e3903a4739d0e577ade64da4de7a7d248bd39e619d4dce7344ecd9dce44ee0eea28185d62093937cc4feb0e64797c077b90d"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB='j\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x2, 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000002c0)=""/195) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={r5, 0x0}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000080)={r5, 0x1}) [ 640.477838][T11703] binder: 11701:11703 unknown command -1 [ 640.481902][T11698] ? trace_hardirqs_off_caller+0x55/0x230 [ 640.481930][T11698] do_syscall_64+0xf6/0x7d0 [ 640.481952][T11698] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 640.481972][T11698] RIP: 0033:0x7f655cbe8469 [ 640.508052][T11698] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 640.521551][T11703] binder: 11701:11703 ioctl c0306201 20000200 returned -22 [ 640.527651][T11698] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 640.527668][T11698] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 640.527677][T11698] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 [ 640.527686][T11698] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 640.527696][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 640.527704][T11698] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 09:16:16 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xe400, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}) [ 640.602356][T11706] binder: BINDER_SET_CONTEXT_MGR already set [ 640.619412][T11707] binder_alloc: 11684: binder_alloc_buf, no vma 09:16:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, 0xc5}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="9a5b2e80ea71a6da6336a70d5f73aac1fef9655a3b364964284670845ad0eb384885f4f30b310193c40bf99e200168107acaa7ad9f72f559889e538b138c207dd89bcfad", 0x44) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@binder={0x73622a85, 0x101}, @flat=@weak_binder={0x77622a85, 0x100a, 0xfeffff}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) setns(r5, 0x40000000) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x7, 0x5, 0x4, 0x80000, 0x5, {0x77359400}, {0x4, 0x2, 0x0, 0x1, 0x1f, 0xc, "7dbfa1f2"}, 0x5, 0x1, @planes=&(0x7f0000000100)={0x6, 0x1, @userptr=0xffffffff80000000}, 0x2, 0x0, r0}) ioctl$FIBMAP(r6, 0x1, &(0x7f00000001c0)=0x52) [ 640.651649][T11708] binder: 11684:11708 ioctl 5434 20000000 returned -22 [ 640.658675][T11706] binder: 11701:11706 ioctl 40046207 0 returned -16 09:16:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x462100, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000380)) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0x80044326, &(0x7f0000000140)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfeffff}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f00000001c0)={0x101, 0x7, &(0x7f00000000c0)=[0xbd7, 0x6, 0x8001, 0x7, 0x4, 0x1, 0x200], &(0x7f0000000100)=[0x6, 0x4, 0x2, 0x6, 0x4, 0x1f], &(0x7f0000000180)=[0xffff]}) write$capi20_data(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1000d3068381fa270fff001000000000000052000667f1461d8fbb1d7df7f217c7bf0d50ec94984f1b44bd3140f828cbe91bda686b2b6a703aca1dd347b0e0bfd0ea48e595363037dd7211c410d061292d4dfb4a6caa51fe8f72e58819671647a051e078"], 0x64) [ 640.789288][T11709] binder: BINDER_SET_CONTEXT_MGR already set [ 640.800102][T11709] binder: 11701:11709 ioctl 40046207 0 returned -16 09:16:17 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7002, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x8, 0x0, 0x3}) [ 640.846979][T11709] binder: BINDER_SET_CONTEXT_MGR already set [ 640.895464][T11709] binder: 11701:11709 ioctl 40046207 0 returned -16 [ 640.916017][T11717] binder_alloc: 11711: binder_alloc_buf, no vma [ 640.926255][T11693] binder: BINDER_SET_CONTEXT_MGR already set [ 640.934840][T11693] binder: 11692:11693 ioctl 40046207 0 returned -16 [ 640.942128][T11718] binder: BINDER_SET_CONTEXT_MGR already set [ 640.970090][T11718] binder: 11692:11718 ioctl 40046207 0 returned -16 [ 640.977809][T11693] binder: 11692:11693 unknown command 575537154 [ 640.995888][T11693] binder: 11692:11693 ioctl c0306201 20000280 returned -22 09:16:17 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x5dfd03, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x100, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xc, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000140)={r6, 0x56, "2f7b6364b2516e243e8e2d7c2f98c625fae1ef597128027796efd89aa4edec8a78789e6727874b3d3de771f8f9b06dfbb4bbddb760454f844c33e775dcbf0fb1efb6752a9565bbb7e0ef2394965a724334a2e26f34f2"}, &(0x7f00000001c0)=0x5e) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@rand_addr=0x64010102, @private=0xa010101, r7}, 0xc) [ 641.028138][T11722] binder_alloc: 11716: binder_alloc_buf, no vma [ 641.045390][T11722] binder: 11716:11722 ioctl c02064a4 200001c0 returned -22 09:16:17 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xc, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0xf1bc}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r6, 0x3ff}, &(0x7f00000000c0)=0x8) 09:16:17 executing program 5 (fault-call:0 fault-nth:4): io_uring_setup(0x730, &(0x7f0000000040)={0x0, 0x0, 0x5}) 09:16:17 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a627700"/72], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="0000c14b64189f7170e2b1c806565fd9ce58f9f8632e340d48c8e9ebab3ccedbe6e427e88bb672be047c8e5664076674bddfedee9d0e81f2c65f384c0e7fca08bb55cba12ee8ff3cd8e5fbc9209071ea9750eaf4155e00586f2425b0b702d800"/107], 0x0, 0x2, 0x0}) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f00000002c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000001480)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000fffffe00000000000000000000000000852a6277000000000000000000000000000000000000000061ff9ee59d9d8815a39aad27f9ecdb6c12110efbe113aeb5eefbbf10eac0591c7bf0ad6b358401f5e409166f62467b48707e2af136d2fb8f1d7c75db0dc6ecb4000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYRESDEC], 0x0, 0x2, 0x0}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f00000003c0)="ee949b4984749908a3e66f57e088c9987f409246a94fd4b0202d4026abd185596390046f8ad970fb189964ae6236d7081b27984dfdbc471a2b59cb7a5d6be6647f5b9387799beea471c3d0acb3fbc9ba9634de2f92a2bcd834b2e51d4ce3ecef58b98c41109c284e8b90b0233a7c9cb9e48c6065b9df00c2cd8ad33c6495e8dea8d5128418fdbc12092d01565c0d319486b2003e20853bf9a190c606527ae7473a9a3d9538ab349e4a6065feabd82b73ea43094ae1e7bbf5ce48927c1c500725519645abfe2551cbefc693cbf7779f4734d8462756849e5b26c375d36fb9bfde4ed2f55d4954a62987ab19d1b7bf4fee2351d9d4d08eb0006555723f3fd842e8bda9ed3d7e40e1d79424928c43cecf14b76fd7c3962181d3d99a69a086c3a83ac042293f89e77fe95ff6f8fa85907b277b39bf01611f028f2952f2b434eb4befa60a1354692ff74d36c22698d108535618409ba0dae5bf3dbf33112591e41ddd55d4e8861426b1f813f60bb816de786d9a35e7de7840a7f1ea5b9c5f213b2fc94b7805ab9a94d0bdb95d79632d0aa7acb149988ad3c7e9bd86dd6469bb4b95c900c27f8c7126119584830818c8a97d5e51b6674e5a0bc89cc25c2e498d1ac8c6ac0cc97e75887c802c7a63636c25c3af1efaa2ea9b6facb604ef583ff8cd714073d2812da3b7410da9997e276a4edf598bd2c686f3122bc245aecf458df9618e8c8bd7d8f5381e94c6697e398a310c91d19855ef062a5158425ab9fbfb63d89b951ed097058be3a5214ea91db500eb19313ed83aa9b33cf0381eb81bf81b1723b4f51330829879fdd29fcf32bf9d16c307cbb2214888e0434544538626ae2341eab48a201573ee63232e8af1ad5b7c9c1de81a91d5e8d6d226531cb7899b38dcfd9ea571b8e93cbf8a4e09fe96f8434bf0e3c60368e2aefb1784d7d7ce146e270744d11225c26b5b815789176485052bfddef1112e2dfe46486aa055fcb599d517ddf777eb8359542d727f68c629d4ad520d71825d764a4a0bffb7c8f954046b85317ebbe85782b5e30545b54c2961f7f37311a2b2deb0e39d6fa0d1a252961af4c868fe3127b17623aaad7b1db86c4cd296d6b8c0b12eecdd59e69a8991575d281644531458f6411fd625b1739aaa0d74db45261ca4e60968962118d774df3aec269c228f50ddc49b51ef6fdb48093a758dcae3bf3299df5345de0f0b0285d36cf40930612a5f7468d7d19654f5c2dbb0c17720429747c8fe8ccf11b556953ddf4727a37955d136c81f4ea14704c3b315bc9f0690ba7966127c033ee9e2e8e955033830335f2fe5bd3d1da9df226a8767a3e5abf8e5ff2b8e927c1afc82625bffe6650638e026113c5322b6347422330afebb70b8927443afcad2a0a4f6f21f2658b90c172d3304a78463e5d2a001b5b51dbb5282d1150892486f0100e2f361ba720083c8c4733566a688697a1fb1e7d05b16c20afac473d352f43a95e67f19589b144b403d315a6740bc52c04d407658cb00dfc3c10efa3177151e7ee5db1ee0f609e8de5db190a3e6be8c67b6ce6a0cb2ac8f34ba1222736b967d683dd796c64c65bf1bddc75f48d17e69401793576bc1e40f5bb382a2cf22d3ccf92d9158f981597dab253c6916a7a98411a170c77bb881d157b6450a54803b47bc5e2877a929ed229f09b84b05e2afc2dbffa5f0b5072580b813a3742a11c444570364553bf2c4fa1fe749225918842a75781f80431a773aee0fb24d65580bab526c5120d1af707459f452fe92b9c86999e741e203ed5c21efc6284a887e5c31f941c709fa8630e115ee2c97601b60d486060df040ab842eb0c70abb9f07fb841f13f5c9c5c7d30146634ef2e652bbba636994d126ca1e71c18b873d5a1e08b5a6c4b8c5a7d786e9374576f2ff762d6248dfddcf92f199bbc78f414e0043b860defed0c23275b1deb7e63136cc21e6b336d589a92c9c0426714acaa5b92f6c08fa9875bc6db015f96851f4a178f5d34767a43b06333fa87621922fa40038bf80f9f1db5ced17da1021347be15b43f01690c6999d04730cad5538e80b90e4f1bbc461d312e5be3887aa18880b4cfba7183a1adf1517b212069166af47af29293a810bb5fec76bbef190c0457b6cb3fa52b0152067dd71b6002ed35a657b95f8b24c82d196e63b1d8f801eabe688a6283c5464c92faddf3129c71419ba29dc365c56e9610dd6a6b1bd0fd7d8460fc1be30f94247ffc781388b94baa7febcb9f35fb15689ba2adfd7369ef58f2ec1bd03db56a8796de3632a08ba4c4e083b6f782d443b4197419275627f3ac4a7f588ad338090e5a01d4937bbd87b590488c15b7c9ab5eee14540e74563a3a431e575812c553b0ece876e8fd8ba764b25198e14522c43c21bfd3c2786d4d222d28bbec52737c75be80e9aa70fcb3456ef4cf1c15853675c5fea6a33288b1c9831dd0f4d32d358b83fd3c9ce933a2dbb582d1fc8a146cb72d9967130bd2ccecfc6ee59ad3bdbf1d231b7493c15a8d6ca99fca7fbb6b1d88cca90cb93550ae61f60472b57d4b2f272879e0bbcd6a32493d6f74cea7f3fb8ba042171da5110103773d3ae06abd57569a5274ee0a0ccc2243e9e1a6d109c4a6219af37f5917fe6b939b884228d47f2388ca88600c6fcc73f18ad1eeffd1d1db173f414443ff6e7e3ae249b43fe33522b8242c6c0252989f663aff00ccc477559ab68f04a7e1e266d4057437cbfe62e8615ac64b2a9d1eae0fe50ee2b28f00d01b6a50d57c61d30694b9c46f05c310a12540d96f8ee1515212216431fa42508898e5dc0785ef5fc6a231032a5f72edd1188fbef90a47255c15160491747ca481526efe8c236e42ece334d0167304681d2a6183ee751505b72cffeaed9a72cb64dbf4892595d4923b725ddecbe8b7d4a76903d9c78e88ef2f2af4438e61c3585045746d69267ef2b2fdfd19f6525991ecdd1b733776cb7c057e69cfce888b78a743111e53f7160123d91f2996d1e25bdb1408a66382365da4c35ceb0376e0f18891fc8c51581e4a8adc7bfd65a4362e64c5e53263d0c5410a20d8a5bf899e8955f0228f483d0fd02d006256d20060e8e75212ca07cde38c62429f94ba22d156fe9b0f4839a509e6119a2bc54ca81d06a7be419cf1612136b39a4ba1473359873a154e682f97729dabd16abc3779f340ba8a7d7957b50d94f01f2e56caf3fac1cbe57c9e234f3471687a7c7e2766c83d9169d947ec17cad3053e7c161539473099dcfe240c5bb24722efe8ec3d6116e889e5c59f0a12492a01203179f4512f2d9a960fb70c403052624cfbf916ab975eec4d720146acc94aa845cff9a40abf00cf76442e7f1a33a8786463f4a37c37989bc2c7a4dfbe7472bac3939ed4f1ef7b287410b1ebc4209843a93602684e96182a0282a859cb9a5787ea414aa5599fc1ceb6dcf2d774e1c8c8375bb9107cd0f513b87500994509222406f21937dbd5071a725592132fbc5f2ffdcae1cd8e9204efb9137f54a9718dd79c7c0ab51e79f81de70f95e0e0cf9f71a5e40fd13a787c4f5e41aa7a82301203d6c07b890be158db6119821139a76478f5935612b956d33326bbb7b8c06de2715d796f30a677a848fbcaaec45dfad167bf02eb2be849e855daa66db2fdad045954541ae67fb19f716fc1dd14e9721fcc42236bc9673ef0462a4508b153759c7778519d6d935028a15b3c0e34b4efb63ded15d66ca862dc3b210a2293941ffac5785f519f1637ac74905bed3ab440bfe518a26f778cd686e42c5de84074a35fc337fcc4743ba6f65d9e6ffbdec8be5d558504379cfefb8c9eda2a146992e0e74721f71a419be5884834c6d907af562cfb332088eb2a37b01b1328b914597d61127cd8de58be802a96ec4564d772e40c5a5399d1aefb4cdece03196376a631d9b04a5b93897fb3de7c61ed99d78a525d12663d928be9f4c8aaee2b114004b619b7189a4d88e410456e426ee56cb2a67f7c9d12c6074dad1f669a98bc1ff584be6bb3604a1e856f840da442c605258b48d5c4109b94e9b06c29fed91992228e623eea98ee5fc4390ae5b2b87847f5c4ee16f3f678f435c0e1927a932815ff87f4f4ba033b1fa3e8fca93955068e55db42daae649cb2b5fec1924a3f560f83de51d0268296b0a6ba712cf3e35a3880d7059cbf3113700b8a9343dfafa69898136693257ea8424c0fbb02e308a93ead3b695bab26aa968934814b0fd9a6878c1210e09ed2058ada9550343bd5147d34f1b11a588f411cfec6aa3d19849f3061ca7be6ab9e3f3b4ebd0b85aaf5f0d8587efa010c036c006a74d786e17276eee0ac8664048f757e60e10f4af0704e40fc63e607820a67dc2ae9000e81b1c38eee408e0be8a7d7d48145caf6662089acef84f6545fb3418496f1aee24f4ecd5835479f2fa64f999776329bdd3370fa434996f767c240aba7b6977c21917a6138a5d8463b9053271f7bee19dd5d29677600d0efb3f7952f13599c4ed75f9707f43b5a34a73ec94b1c744570215417543f71a39a9403925bfdef96f09b61fca4bdae1d4e8dee5caeb6c0343bee8fddd45b885e4143b90beb50b5283aec0d15ac3d5e9800d1ab0cc5b0de25a921a6fd045ad83c072982fe49825161798c821415892084b4f9071cf37cc3f514489d156357eebf2ff0fae32b2e26cb5be5bfbf6f93c93fb62c08264507f5e2bd0c5dca7a26350da7c9948d7a9fb6210c2263b984a7be6d8652e05063165c558fec43f6893672ea9ad195ba46c3216003ce1fd9972feeb94530afe33cb148757e00cfd92647ba9259f56d38cb738c3edd7a0854b10f09534e10020fd99fb7fc05be9086e723ef1544e35e566a74cc8b44a47619495cfabf3c931441a3a482ed99e32a15ac3d8f843008b7ca5e34dce07f7f0a7da976bde3d2853cf1e21036ea8cb343ea349a728c3442746740d477a1c6b681a7f3d3d37d42fb46e41b9f39b1c164311393f2189172bf4637cf7bbf9fc7e350fcfc98392a1c2dac19aef03cc28e6d6fec4c96602621642a2a9d0ef75738e3e833ae0b7b5542456f9325772de1de3efe68fe1cdf229b6152a2bcce3c773dcce5f441f64845fe369b9a084525065538077836c9997f77dee2217d51dcf682a970e326fb00fed1467fd4e585803ce5aec400a1efaed8ba51441bf39726200c6f8346b806f430f66e84d2b73c649b79ddfa56a5bd62ef5ad01a69dc0488c80a87705415c5646d213d8b263afbba9781bac4ffc628e1f1138c5655c64aa621cfe921f77dd1751ea3d6485161d46768bdb2e004b0e30db55ba4c5d89998b7a31c2e2db522ea72c8c7c4959b86bcc2818f23efe92e04a4c3213a807607752b7899110b4907cf5c5d48a188815433c13fb12bfab52c7e4bd3ce1fcff8179e973d5de05a1499eab3aeb41fb0d8d15d333345b8c1cc9f3659bc98fb415af3ea9f68ddeb449aa64ca4d004366e18538af3e598d4c9fa5f1a324f7f8134e51c59a6ae92d74c1d01575e4e688efbd59e4146f13f1fbed44b15aa20efcc29ab031c50ec12a56e33a46b2f54f4c2878923e989e33c5a29fd6cfd149bfa9afbff726d5d70cded878efe541ae9423b207d70385a18a45e7e099a98a00f4ec6f7c1f95c5bbe55a1846c2fa4d22721b37f83171eb024329fc2584f2863df14111f13d4fe0344e2b6179103ba365bc55db4af785194bd61acb514e9120fc7ac161b001053481735f53d293618c3e166457c342a8a52c55bb336a77697439c56007be6c6212440aebb99942bea521e58fb01a2084e8913e0a1da9", &(0x7f0000000080)=""/199, &(0x7f0000000000)="87701ad590f09e9c750c59072a39cb7efef5", &(0x7f0000000180)="c60cd0efee89cbeee279f4a7e3d94131abbc8f9c1c68288444e7d1baae3d5592c251c02b398b3618d7fb292a988d495988fe527536cdfb66afc665f6f5f12210e3f1b110e5c40738dbab6476534576060b7b0125e6bf3a54302d29624f444a773a2a8c555be4887c382c8246caddf5d3eecb21531a5049b878155ceabed578989416d29b2364bce7d9c8865df632a4d3ebc83b5e68a6f43696a3d98f3d64039898d12dd1cbd5e76a9812bdfb790a40119af44e200cada4d7f30f5274c45fbcaead9c1faf4f3422809d77dbcab428ec0bc22ae8dbaa488fba5f", 0x2, r5, 0x4}, 0x38) ioctl$RTC_SET_TIME(r2, 0x7002, &(0x7f0000000380)={0x18, 0x0, 0x8000000, 0x15, 0x20000000, 0x0, 0x5}) [ 641.263702][T11731] FAULT_INJECTION: forcing a failure. [ 641.263702][T11731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 641.277555][T11731] CPU: 0 PID: 11731 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 641.287456][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.297514][T11731] Call Trace: [ 641.300812][T11731] dump_stack+0x188/0x20d [ 641.305651][T11731] should_fail.cold+0x5/0x14 [ 641.305671][T11731] ? setup_fault_attr+0x1e0/0x1e0 [ 641.305700][T11731] __alloc_pages_nodemask+0x17a/0x810 [ 641.305720][T11731] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 641.305741][T11731] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 641.305769][T11731] ? lockdep_init_map_waits+0x26a/0x890 [ 641.305790][T11731] alloc_pages_current+0xff/0x200 [ 641.305811][T11731] __get_free_pages+0x8/0x40 [ 641.305824][T11731] io_uring_setup+0xc3b/0x22b0 [ 641.305842][T11731] ? io_sq_thread+0xbe0/0xbe0 [ 641.305859][T11731] ? wait_for_completion+0x270/0x270 [ 641.305873][T11731] ? __this_cpu_preempt_check+0x28/0x190 [ 641.305890][T11731] ? __sb_end_write+0x101/0x1d0 [ 641.305915][T11731] ? fput_many+0x2f/0x1a0 [ 641.305934][T11731] ? trace_hardirqs_off_caller+0x55/0x230 [ 641.305958][T11731] do_syscall_64+0xf6/0x7d0 [ 641.305977][T11731] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 641.305990][T11731] RIP: 0033:0x7f655cbe8469 [ 641.306006][T11731] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 641.306015][T11731] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 641.306030][T11731] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 641.306040][T11731] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 [ 641.306048][T11731] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 641.306057][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 641.306066][T11731] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 [ 641.349634][T11730] binder: 11725:11730 ioctl c0306201 20000540 returned -14 [ 641.398831][T11731] INFO: trying to register non-static key. [ 641.398838][T11731] the code is fine but needs lockdep annotation. [ 641.398843][T11731] turning off the locking correctness validator. [ 641.398860][T11731] CPU: 0 PID: 11731 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 641.398868][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.398872][T11731] Call Trace: [ 641.398892][T11731] dump_stack+0x188/0x20d [ 641.398909][T11731] register_lock_class+0x1664/0x1760 [ 641.398925][T11731] ? debug_smp_processor_id+0x2f/0x185 [ 641.398939][T11731] ? perf_trace_lock+0xeb/0x4c0 [ 641.398952][T11731] ? lock_downgrade+0x840/0x840 [ 641.398965][T11731] ? is_dynamic_key+0x1a0/0x1a0 [ 641.398976][T11731] ? __bfs+0x520/0x520 [ 641.398988][T11731] ? __lock_acquire+0x2184/0x4c50 [ 641.399003][T11731] __lock_acquire+0x104/0x4c50 [ 641.399018][T11731] ? mark_lock+0x12b/0xf10 [ 641.399031][T11731] ? is_dynamic_key+0x1a0/0x1a0 [ 641.399045][T11731] ? print_usage_bug+0x240/0x240 [ 641.399059][T11731] ? mark_held_locks+0xe0/0xe0 [ 641.399075][T11731] ? __lock_acquire+0x2184/0x4c50 [ 641.399091][T11731] lock_acquire+0x1f2/0x8f0 [ 641.399175][T11731] ? __wake_up_common_lock+0xb4/0x130 [ 641.399190][T11731] ? perf_trace_lock+0xeb/0x4c0 [ 641.399205][T11731] ? lock_release+0x800/0x800 [ 641.399219][T11731] ? perf_trace_lock+0xeb/0x4c0 [ 641.399232][T11731] ? find_held_lock+0x2d/0x110 [ 641.399247][T11731] ? __bfs+0x520/0x520 [ 641.399265][T11731] _raw_spin_lock_irqsave+0x8c/0xbf [ 641.399279][T11731] ? __wake_up_common_lock+0xb4/0x130 [ 641.399294][T11731] __wake_up_common_lock+0xb4/0x130 [ 641.399308][T11731] ? __wake_up_common+0x600/0x600 [ 641.399349][T11731] ? rwlock_bug.part.0+0x90/0x90 [ 641.399394][T11731] io_cqring_ev_posted+0xa5/0x1e0 [ 641.399409][T11731] io_ring_ctx_wait_and_kill+0x2bc/0x5a0 [ 641.399423][T11731] io_uring_setup+0x115e/0x22b0 [ 641.399438][T11731] ? io_sq_thread+0xbe0/0xbe0 [ 641.399460][T11731] ? wait_for_completion+0x270/0x270 [ 641.399475][T11731] ? __this_cpu_preempt_check+0x28/0x190 [ 641.399491][T11731] ? __sb_end_write+0x101/0x1d0 [ 641.399507][T11731] ? fput_many+0x2f/0x1a0 [ 641.399522][T11731] ? trace_hardirqs_off_caller+0x55/0x230 [ 641.399540][T11731] do_syscall_64+0xf6/0x7d0 [ 641.399555][T11731] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 641.399566][T11731] RIP: 0033:0x7f655cbe8469 [ 641.399580][T11731] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 641.399587][T11731] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 641.399600][T11731] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 641.399608][T11731] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 [ 641.399616][T11731] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 641.399623][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 641.399631][T11731] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 [ 641.399679][T11731] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 641.399689][T11731] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 641.399704][T11731] CPU: 0 PID: 11731 Comm: syz-executor.5 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 641.399712][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.399727][T11731] RIP: 0010:__wake_up_common+0xdc/0x600 [ 641.399741][T11731] Code: b9 04 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 39 fd 0f 84 d0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 04 00 00 49 bd 00 00 00 00 00 fc ff df 4d 8b [ 641.399748][T11731] RSP: 0018:ffffc900085afc20 EFLAGS: 00010046 [ 641.399760][T11731] RAX: dffffc0000000000 RBX: ffff8880a839b120 RCX: 1ffffffff1517002 [ 641.399768][T11731] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 641.399777][T11731] RBP: ffff8880a839b160 R08: ffffffffffffffe8 R09: ffffc900085afcb8 [ 641.399785][T11731] R10: 0000000000000003 R11: fffff520010b5f7e R12: 0000000000000001 [ 641.399793][T11731] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 641.399805][T11731] FS: 00007f655d2d9700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 641.399814][T11731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.399823][T11731] CR2: 0000000000000000 CR3: 000000009cd57000 CR4: 00000000001406f0 [ 641.399834][T11731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 641.399843][T11731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 641.399847][T11731] Call Trace: [ 641.399867][T11731] __wake_up_common_lock+0xd0/0x130 [ 641.399882][T11731] ? __wake_up_common+0x600/0x600 [ 641.399898][T11731] ? rwlock_bug.part.0+0x90/0x90 [ 641.399917][T11731] io_cqring_ev_posted+0xa5/0x1e0 [ 641.399932][T11731] io_ring_ctx_wait_and_kill+0x2bc/0x5a0 [ 641.399947][T11731] io_uring_setup+0x115e/0x22b0 [ 641.399963][T11731] ? io_sq_thread+0xbe0/0xbe0 [ 641.399977][T11731] ? wait_for_completion+0x270/0x270 [ 641.399991][T11731] ? __this_cpu_preempt_check+0x28/0x190 [ 641.400004][T11731] ? __sb_end_write+0x101/0x1d0 [ 641.400020][T11731] ? fput_many+0x2f/0x1a0 [ 641.400034][T11731] ? trace_hardirqs_off_caller+0x55/0x230 [ 641.400053][T11731] do_syscall_64+0xf6/0x7d0 [ 641.400067][T11731] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 641.400077][T11731] RIP: 0033:0x7f655cbe8469 [ 641.400089][T11731] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 641.400096][T11731] RSP: 002b:00007f655d2d8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 641.400109][T11731] RAX: ffffffffffffffda RBX: 0000000000433220 RCX: 00007f655cbe8469 [ 641.400116][T11731] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000730 [ 641.400124][T11731] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 641.400132][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 641.400140][T11731] R13: 0000000000000204 R14: 0000000000416827 R15: 00007f655d2d95c0 [ 641.400153][T11731] Modules linked in: [ 641.400171][T11731] ---[ end trace e28053250933bab7 ]--- [ 641.400186][T11731] RIP: 0010:__wake_up_common+0xdc/0x600 [ 641.400200][T11731] Code: b9 04 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 39 fd 0f 84 d0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 04 00 00 49 bd 00 00 00 00 00 fc ff df 4d 8b [ 641.400207][T11731] RSP: 0018:ffffc900085afc20 EFLAGS: 00010046 [ 641.400219][T11731] RAX: dffffc0000000000 RBX: ffff8880a839b120 RCX: 1ffffffff1517002 [ 641.400227][T11731] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 641.400236][T11731] RBP: ffff8880a839b160 R08: ffffffffffffffe8 R09: ffffc900085afcb8 [ 641.400244][T11731] R10: 0000000000000003 R11: fffff520010b5f7e R12: 0000000000000001 [ 641.400252][T11731] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 641.400263][T11731] FS: 00007f655d2d9700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 641.400272][T11731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.400281][T11731] CR2: 0000000000000000 CR3: 000000009cd57000 CR4: 00000000001406f0 [ 641.400289][T11731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 641.400298][T11731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 641.400304][T11731] Kernel panic - not syncing: Fatal exception [ 641.401743][T11731] Kernel Offset: disabled [ 642.268034][T11731] Rebooting in 86400 seconds..