x2, 0x0, 0x6, 0xb, 0x10, "1f32d41a008dbbfbadebb8630db874f10d3c7d66528132b06af9c70576fcff9f4c6f6382d9b317291c2823cfe9602bf6b74aaca2972b73093267a07e1071b064", "d719ad0a524c32825a07fec5d8aeb5a7ca2ea32f3db4d28998454e8be187da9e6a29d2f572c50b8e6bc7e17281b673ed938f5db30d7b13f055cf6e8a433a8d9c", "52bbbd85ead86b2bca3bc3b8faa181368e2c1c22468f24a1f56f3a8ddfbaf315", [0x0, 0x4cf]})

[  826.442158][T32020] binder: 31989:32020 unknown command 536871040
03:03:04 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000001c0)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00', 0x25}, 0x0, [0x4, 0x0, 0x7fffffff, 0x3ff, 0x10000, 0x9, 0x3, 0x2, 0x1, 0x7fffffff, 0x0, 0x62f, 0x5, 0xe7e4, 0x200, 0x1ff, 0x8000, 0x7, 0x0, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0xa2, 0x8, 0x0, 0x5, 0x1, 0x3732, 0xfff, 0xffffffff, 0x3, 0xffff, 0x81, 0x44b, 0x7, 0x8, 0x10001, 0x1000, 0xfff, 0x5, 0x0, 0xfffffffffffffffe, 0xa7, 0x12, 0x6, 0x9, 0x20000000, 0xffffffffffff0001, 0x8, 0x7f, 0x9, 0xfffffffffffffff7, 0x6, 0x80, 0x959, 0x9, 0x80000001, 0x5, 0x10000, 0x800, 0x9, 0x5, 0x3, 0x3, 0x7fff, 0x3517dfac, 0x9b, 0x80000000, 0x88, 0x1, 0x1000, 0x5, 0x3, 0x80, 0x1, 0x5, 0x7ff, 0x0, 0x9a9, 0xfffffffffffffc01, 0xffffffffffffff81, 0x7d, 0x3ff, 0x5, 0x9, 0x1f, 0x7, 0x6, 0x5, 0x16, 0x80, 0xfffffffffffffffa, 0x6, 0x40, 0x7, 0x13d5, 0x2, 0xfffffffffffffffd, 0x7fffffff, 0x4, 0x8001, 0xffffffff, 0x8, 0x2, 0x7fff, 0x97, 0x2, 0x401, 0x7, 0x2, 0x1f, 0x2, 0xfffffffffffffff9, 0x3, 0x5, 0x0, 0xffffffffffffff5c, 0x2, 0x5, 0xacf4, 0xf11, 0x5, 0x100, 0x7e, 0x8, 0x3], {0x77359400}})
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4bb}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  826.487624][T32044] binder: 31989:32044 ioctl c0306201 200002c0 returned -14
[  826.526208][T32020] binder: 31989:32020 ioctl c0306201 20000440 returned -22
[  826.561540][T32044] binder_alloc: binder_alloc_mmap_handler: 31989 20001000-20004000 already mapped failed -16
[  826.589780][T32020] binder: BINDER_SET_CONTEXT_MGR already set
[  826.611564][T32044] binder: 31989:32044 unknown command 536871040
[  826.618297][T32020] binder: 31989:32020 ioctl 40046207 0 returned -16
[  826.648985][T32044] binder: 31989:32044 ioctl c0306201 20000440 returned -22
[  826.657285][ T7897] binder: unexpected work type, 4, not freed
[  826.665627][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  826.693720][ T7897] binder: undelivered transaction 2971, process died.
03:03:04 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x101000)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x6, 0xb, 0x10, "1f32d41a008dbbfbadebb8630db874f10d3c7d66528132b06af9c70576fcff9f4c6f6382d9b317291c2823cfe9602bf6b74aaca2972b73093267a07e1071b064", "d719ad0a524c32825a07fec5d8aeb5a7ca2ea32f3db4d28998454e8be187da9e6a29d2f572c50b8e6bc7e17281b673ed938f5db30d7b13f055cf6e8a433a8d9c", "52bbbd85ead86b2bca3bc3b8faa181368e2c1c22468f24a1f56f3a8ddfbaf315", [0x0, 0x4cf]})

03:03:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  826.729212][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  826.735309][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  826.803135][T32263] binder: 32262:32263 unknown command 536871040
[  826.839662][T32263] binder: 32262:32263 ioctl c0306201 20000440 returned -22
[  826.854520][T32270] binder: 32262:32270 ioctl c0306201 200002c0 returned -14
[  826.867837][T32270] binder_alloc: binder_alloc_mmap_handler: 32262 20001000-20004000 already mapped failed -16
[  826.881019][T32263] binder: BINDER_SET_CONTEXT_MGR already set
[  826.890511][T32270] binder: 32262:32270 unknown command 536871040
[  826.890876][T32263] binder: 32262:32263 ioctl 40046207 0 returned -16
[  826.896957][T32270] binder: 32262:32270 ioctl c0306201 20000440 returned -22
[  826.917222][ T5064] binder: unexpected work type, 4, not freed
[  826.924100][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4cb}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:04 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)

03:03:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x8)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x0, 'lc\x00', 0x7, 0x20, 0x34}, {@rand_addr=0x92bb, 0x4e20, 0x7, 0x81, 0x100000000, 0x7fffffff}}, 0x44)

03:03:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:04 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1, &(0x7f0000000300)=""/147, 0x93}, 0x3}, {{&(0x7f00000003c0)=@tipc=@id, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/102, 0x66}, 0x8}, {{&(0x7f0000000500)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)=""/36, 0x24}], 0x3, &(0x7f0000000700)=""/26, 0x1a}, 0x2}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/77, 0x4d}, {&(0x7f0000000940)=""/181, 0xb5}, {&(0x7f0000000a00)=""/194, 0xc2}, {&(0x7f0000000b00)=""/79, 0x4f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x3}, {{&(0x7f0000001bc0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/156, 0x9c}, {&(0x7f0000001d00)=""/220, 0xdc}, {&(0x7f0000001e00)=""/99, 0x63}, {&(0x7f0000001e80)=""/29, 0x1d}, {&(0x7f0000001ec0)=""/164, 0xa4}], 0x5}, 0x3}, {{&(0x7f0000001fc0)=@sco, 0x80, &(0x7f0000003240)=[{&(0x7f0000002040)=""/170, 0xaa}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/38, 0x26}, {&(0x7f0000003140)=""/14, 0xe}, {&(0x7f0000003180)=""/191, 0xbf}], 0x5, &(0x7f0000003280)=""/244, 0xf4}, 0x8001}], 0x6, 0x0, &(0x7f0000003440)={0x77359400})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0)
ioctl$KDADDIO(r1, 0x4b34, 0xffffffffffff8000)
acct(&(0x7f0000000040)='./file0\x00')
clock_getres(0x5, &(0x7f0000000000))

03:03:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x5, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  826.945146][ T5064] binder: undelivered transaction 2975, process died.
[  827.030946][T32379] binder: 32378:32379 unknown command 536871040
[  827.037497][T32379] binder: 32378:32379 ioctl c0306201 20000440 returned -22
[  827.049964][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  827.056553][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  827.063617][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  827.070117][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x422000, 0x0)
getsockopt$inet_dccp_int(r2, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={<r3=>0x0, 0x3}, &(0x7f00000003c0)=0x84)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r3, 0x7ff, 0x5}, 0xc)

[  827.117285][T32379] binder: 32378:32379 ioctl c0306201 200002c0 returned -14
[  827.173269][T32451] binder_alloc: binder_alloc_mmap_handler: 32378 20001000-20004000 already mapped failed -16
[  827.208356][T32379] binder: BINDER_SET_CONTEXT_MGR already set
03:03:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4db}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:05 executing program 2:
clock_nanosleep(0x99bb52581143db23, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00')
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/204, &(0x7f00000000c0)=0xcc)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000002c0)=0x1c)

[  827.245473][T32451] binder: 32378:32451 unknown command 536871040
[  827.282460][ T7897] binder: unexpected work type, 4, not freed
[  827.288627][T32379] binder: 32378:32379 ioctl 40046207 0 returned -16
03:03:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4cb}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  827.301428][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  827.331799][ T7897] binder: undelivered transaction 2979, process died.
[  827.345578][T32451] binder: 32378:32451 ioctl c0306201 20000440 returned -22
03:03:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x42)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})

03:03:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:05 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCFLSH(r0, 0x80047456, 0x8121000)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  827.522109][T32635] binder: 32625:32635 unknown command 536871040
03:03:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4eb}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  827.587472][T32635] binder: 32625:32635 ioctl c0306201 20000440 returned -22
[  827.587571][T32669] binder: 32625:32669 ioctl c0306201 200002c0 returned -14
03:03:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:05 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)

[  827.753603][T32669] binder_alloc: binder_alloc_mmap_handler: 32625 20001000-20004000 already mapped failed -16
[  827.777104][T32635] binder: BINDER_SET_CONTEXT_MGR already set
[  827.783629][T32669] binder: 32625:32669 unknown command 536871040
[  827.790371][T32635] binder: 32625:32635 ioctl 40046207 0 returned -16
03:03:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  827.797262][T32669] binder: 32625:32669 ioctl c0306201 20000440 returned -22
[  827.805016][T32635] binder_alloc: 32625: binder_alloc_buf, no vma
[  827.813239][ T5064] binder: unexpected work type, 4, not freed
[  827.824600][T32635] binder: 32625:32635 transaction failed 29189/-3, size 24-8 line 3147
[  827.844812][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4fb}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  827.873093][ T5064] binder: undelivered transaction 2983, process died.
[  827.917168][T32635] binder: 32625:32635 ioctl c0306201 200002c0 returned -14
[  827.943035][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:05 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)

[  828.142741][  T480] binder: 479:480 unknown command 536871040
[  828.197300][  T480] binder: 479:480 ioctl c0306201 20000440 returned -22
03:03:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x50b}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  828.250348][  T486] binder: 479:486 ioctl c0306201 200002c0 returned -14
[  828.303711][  T486] binder_alloc: binder_alloc_mmap_handler: 479 20001000-20004000 already mapped failed -16
[  828.364751][  T480] binder: BINDER_SET_CONTEXT_MGR already set
[  828.389736][  T486] binder: 479:486 unknown command 536871040
[  828.401359][  T480] binder: 479:480 ioctl 40046207 0 returned -16
03:03:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={<r1=>0x0, 0x2}, &(0x7f0000000100)=0x8)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x100, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000300))
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @loopback}}}, 0x84)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x800, 0x0)
ioctl$SCSI_IOCTL_SYNC(r3, 0x4)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flistxattr(r0, &(0x7f0000000000)=""/118, 0x76)
r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x698, 0x10002)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)

[  828.408811][  T486] binder: 479:486 ioctl c0306201 20000440 returned -22
[  828.435092][  T480] binder_alloc: 479: binder_alloc_buf, no vma
[  828.449493][ T5064] binder: unexpected work type, 4, not freed
03:03:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  828.480315][  T480] binder: 479:480 transaction failed 29189/-3, size 24-8 line 3147
[  828.492649][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  828.506018][ T5064] binder: undelivered transaction 2988, process died.
[  828.523092][  T480] binder: 479:480 ioctl c0306201 200002c0 returned -14
03:03:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x51b}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  828.552289][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='GPLselfvboxnet1(usersystemusertrusted]\x00', 0x27, 0x2)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  828.663435][  T814] binder: 813:814 unknown command 536871040
03:03:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:06 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7400000000000000, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  828.718601][  T814] binder: 813:814 ioctl c0306201 20000440 returned -22
[  828.720042][  T819] binder: 813:819 ioctl c0306201 200002c0 returned -14
[  828.836119][  T861] binder: BINDER_SET_CONTEXT_MGR already set
[  828.840942][  T819] binder_alloc: binder_alloc_mmap_handler: 813 20001000-20004000 already mapped failed -16
[  828.853026][  T861] binder: 852:861 ioctl 40046207 0 returned -16
[  828.865712][  T814] binder: BINDER_SET_CONTEXT_MGR already set
[  828.874133][  T819] binder: 813:819 unknown command 536871040
03:03:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0xf00}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  828.884734][  T814] binder: 813:814 ioctl 40046207 0 returned -16
[  828.893389][  T819] binder: 813:819 ioctl c0306201 20000440 returned -22
[  828.904640][  T814] binder_alloc: 813: binder_alloc_buf, no vma
[  828.913171][ T5064] binder: unexpected work type, 4, not freed
[  828.935836][  T814] binder: 813:814 transaction failed 29189/-3, size 24-8 line 3147
[  828.944034][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  828.956058][ T5064] binder: undelivered transaction 2993, process died.
[  828.975587][  T814] binder: 813:814 ioctl c0306201 200002c0 returned -14
[  829.004956][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:06 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
listen(r0, 0xfff)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:06 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x7, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:06 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7400000000000000, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x48, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  829.139611][ T1046] binder: 1042:1046 unknown command 536871040
[  829.184730][ T1046] binder: 1042:1046 ioctl c0306201 20000440 returned -22
[  829.205101][ T1064] binder: BINDER_SET_CONTEXT_MGR already set
[  829.227867][ T1064] binder: 1056:1064 ioctl 40046207 0 returned -16
03:03:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  829.257512][ T1064] binder: 1056:1064 unknown command 536871040
[  829.288197][ T1064] binder: 1056:1064 ioctl c0306201 20000440 returned -22
03:03:07 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x260000, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080))
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10082, 0x0)
ioctl$TIOCCBRK(r1, 0x5428)

[  829.342419][ T1272] binder_alloc: 1042: binder_alloc_buf failed to map pages in userspace, no vma
[  829.359464][ T1272] binder: 1056:1272 transaction failed 29189/-3, size 24-8 line 3147
03:03:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7400000000000000, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  829.418896][ T1272] binder: 1056:1272 ioctl c0306201 200002c0 returned -14
[  829.468501][ T1064] binder_alloc: binder_alloc_mmap_handler: 1056 20001000-20004000 already mapped failed -16
03:03:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  829.511761][ T1289] binder: 1288:1289 unknown command 536871040
[  829.533868][ T1289] binder: 1288:1289 ioctl c0306201 20000440 returned -22
03:03:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1002}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  829.559563][ T1064] binder: BINDER_SET_CONTEXT_MGR already set
[  829.566351][ T1272] binder: 1056:1272 unknown command 536871040
[  829.596603][ T1064] binder: 1056:1064 ioctl 40046207 0 returned -16
[  829.604808][ T1289] binder: 1288:1289 ioctl c0306201 200002c0 returned -14
03:03:07 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  829.609420][ T1272] binder: 1056:1272 ioctl c0306201 20000440 returned -22
[  829.617551][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
[  829.641502][ T5064] binder: unexpected work type, 4, not freed
[  829.657554][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:07 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xa389, 0x8fd, 0xffff, 0x7}, {0x100000001, 0x100, 0x4, 0xfffffffffffffffe}, {0x7, 0x2, 0x5401, 0x76d}, {0x6, 0x8, 0x2, 0xd3}, {0x7, 0x3, 0xa3ca, 0x80000001}, {0x4, 0x7f, 0x7}, {0x7fff, 0x0, 0xffff, 0x8000}]})
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0xb, 0x200000, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1f)

[  829.710825][ T5064] binder: undelivered transaction 3000, process died.
03:03:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getdents(r0, &(0x7f0000000040)=""/206, 0xce)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x0, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4c, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:07 executing program 2:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x224100)
accept4$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
rt_sigqueueinfo(r1, 0x3e, &(0x7f0000000100)={0x1f, 0x9a63, 0x5})
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x20)
socket$bt_rfcomm(0x1f, 0x3, 0x3)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6c00000000000000, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x0, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  829.989069][ T1511] binder: 1510:1511 unknown command 536871040
[  830.019471][ T1547] binder: BINDER_SET_CONTEXT_MGR already set
[  830.054072][ T1511] binder: 1510:1511 ioctl c0306201 20000440 returned -22
[  830.083407][ T1547] binder: 1535:1547 ioctl 40046207 0 returned -16
[  830.083534][ T1598] binder: 1510:1598 ioctl c0306201 200002c0 returned -14
03:03:08 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x3fffc)

03:03:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x0, 0x6, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x100f}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  830.161329][ T1598] binder_alloc: binder_alloc_mmap_handler: 1510 20001000-20004000 already mapped failed -16
03:03:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6c00000000000000, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:08 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, <r1=>0x0]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0xb2ea}, &(0x7f0000000100)=0x8)
syz_open_dev$mouse(0x0, 0x1bc, 0x0)

[  830.254486][ T1511] binder: BINDER_SET_CONTEXT_MGR already set
[  830.274204][ T1598] binder: 1510:1598 unknown command 536871040
[  830.289716][ T1598] binder: 1510:1598 ioctl c0306201 20000440 returned -22
[  830.355852][ T5064] binder: undelivered transaction 3004, process died.
[  830.370968][ T1511] binder: 1510:1511 ioctl 40046207 0 returned -16
[  830.377409][ T1839] binder: 1837:1839 unknown command 536871040
[  830.377426][ T1839] binder: 1837:1839 ioctl c0306201 20000440 returned -22
[  830.382256][ T1839] binder: 1837:1839 ioctl c0306201 200002c0 returned -14
[  830.389622][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x60, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x0)

[  830.472752][ T5064] binder: unexpected work type, 4, not freed
[  830.488070][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  830.524479][ T1862] binder: BINDER_SET_CONTEXT_MGR already set
03:03:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x3, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0)

[  830.570834][ T5064] binder: undelivered transaction 3008, process died.
[  830.582615][ T1862] binder: 1860:1862 ioctl 40046207 0 returned -16
03:03:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0xfff, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  830.614281][ T1865] binder: 1860:1865 unknown command 536871040
[  830.644951][ T1891] binder: 1860:1891 transaction failed 29189/-22, size 24-8 line 2994
03:03:08 executing program 1 (fault-call:0 fault-nth:0):
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

03:03:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0x0, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  830.686490][ T1865] binder: 1860:1865 ioctl c0306201 20000440 returned -22
[  830.726539][ T1891] binder: 1860:1891 ioctl c0306201 200002c0 returned -14
[  830.779196][ T1862] binder_alloc: binder_alloc_mmap_handler: 1860 20001000-20004000 already mapped failed -16
03:03:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000000)={<r1=>0x0, 0x68, "eec74357aaee163bea15c6fdd279fe9d064ba2fcbb935db850ca0bc0fa39a78d880a420d5bc5773dd3e498f8c1d4c88d326f949a997146244d80dd30066d912038aca9ee199d6b59907a9008efcfc597cad9b8ded6522faa5809719ecf57f0938158063563f4e18d"}, &(0x7f0000000080)=0x70)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  830.838180][ T1891] binder: 1860:1891 unknown command 536871040
[  830.889255][    C0] net_ratelimit: 18 callbacks suppressed
[  830.889266][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  830.900857][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  830.920281][ T1865] binder_alloc: 1860: binder_alloc_buf, no vma
03:03:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x4a03}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:08 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

03:03:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0x0, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  830.941472][ T1891] binder: 1860:1891 ioctl c0306201 20000440 returned -22
[  830.948450][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
[  830.955634][ T1865] binder: 1860:1865 transaction failed 29189/-3, size 24-8 line 3147
[  831.015289][ T1865] binder: 1860:1865 ioctl c0306201 200002c0 returned -14
[  831.035195][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:09 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040))
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
fcntl$setsig(r1, 0xa, 0x27)
r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xa, 0x40)
ioctl$KDDISABIO(r2, 0x4b37)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000080)=0x176)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0x2}, 0x2)
syz_open_dev$mouse(0x0, 0x1ba, 0x8000000000)

03:03:09 executing program 1:
clock_nanosleep(0x4, 0x0, 0x0, 0x0)

03:03:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x68, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0x0, 0x6}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:09 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x300, @time={0x0, 0x989680}, 0x800, {0x0, 0x8001}, 0xfffffffffffffffc, 0x1})
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'ip6erspan0\x00', {0x2, 0x4e20, @empty}})
clock_nanosleep(0x1, 0x40, 0x0, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000000)=[{r1, 0x2008}], 0x1, &(0x7f0000000080)={r2, r3+30000000}, &(0x7f00000000c0)={0x6}, 0x8)

[  831.209243][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  831.215075][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  831.221018][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  831.226834][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  831.232781][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  831.238600][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:09 executing program 1:
clock_nanosleep(0xb, 0x0, 0x0, 0x0)

03:03:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0xfff}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  831.288309][ T2107] binder: 2106:2107 unknown command 536871040
[  831.341299][ T2107] binder: 2106:2107 ioctl c0306201 20000440 returned -22
[  831.355615][ T2107] binder: 2106:2107 ioctl c0306201 200002c0 returned -14
[  831.381624][ T2112] binder_alloc: binder_alloc_mmap_handler: 2106 20001000-20004000 already mapped failed -16
03:03:09 executing program 1:
clock_nanosleep(0x2, 0x1508, 0x0, 0x0)

[  831.465652][ T2112] binder: 2106:2112 unknown command 536871040
[  831.474533][ T2107] binder: BINDER_SET_CONTEXT_MGR already set
[  831.495492][ T2112] binder: 2106:2112 ioctl c0306201 20000440 returned -22
03:03:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0xfff}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  831.524782][ T7897] binder: unexpected work type, 4, not freed
[  831.544878][ T2107] binder: 2106:2107 ioctl 40046207 0 returned -16
[  831.551725][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  831.574219][ T7897] binder: undelivered transaction 3015, process died.
03:03:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x5a03}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:09 executing program 1:
clock_nanosleep(0x2, 0x3508, 0x0, 0x0)

03:03:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6c, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x7af6d594, 0x3, 0x77e, 0x1}, {0x1, 0x0, 0xfff}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:09 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000002c0)=""/4096)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:09 executing program 1:
clock_nanosleep(0x2, 0x60ff, 0x0, 0x0)

[  831.929274][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  831.935176][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  831.944057][ T2133] binder: 2132:2133 unknown command 536871040
[  831.956116][ T2133] binder: 2132:2133 ioctl c0306201 20000440 returned -22
[  831.977903][ T2133] binder: 2132:2133 ioctl c0306201 200002c0 returned -14
[  832.017296][ T2141] binder_alloc: binder_alloc_mmap_handler: 2132 20001000-20004000 already mapped failed -16
03:03:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x1, 0x0, 0xfff}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  832.063100][ T2133] binder: BINDER_SET_CONTEXT_MGR already set
[  832.101801][ T2133] binder: 2132:2133 ioctl 40046207 0 returned -16
03:03:10 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x82000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000001c0)={0xeddf00000000000, 0x100000001, 0x8, {}, 0xffffffffffffffe0, 0x1f})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x100, 0x2, 'client0\x00', 0xffffffff80000000, "2df797b0bce1439d", "9b5f1e6b8a3fd7303b16ea1e99a2ff2aac2eac85647c46cfa9a7c4c5e9b0a3f0", 0x9, 0x1})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)

03:03:10 executing program 1:
clock_nanosleep(0x2, 0x101208, 0x0, 0x0)

[  832.160106][ T2250] binder: 2132:2250 unknown command 536871040
[  832.181427][ T2250] binder: 2132:2250 ioctl c0306201 20000440 returned -22
03:03:10 executing program 1:
clock_nanosleep(0x2, 0x50080a, 0x0, 0x0)

[  832.219356][ T7897] binder: undelivered transaction 3019, process died.
[  832.226285][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x1, 0x0, 0xfff}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x74, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  832.399359][ T2278] binder: 2277:2278 unknown command 536871040
[  832.419360][ T2278] binder: 2277:2278 ioctl c0306201 20000440 returned -22
[  832.433432][ T2278] binder: 2277:2278 ioctl c0306201 200002c0 returned -14
[  832.468165][ T2346] binder_alloc: binder_alloc_mmap_handler: 2277 20001000-20004000 already mapped failed -16
[  832.513533][ T2278] binder: BINDER_SET_CONTEXT_MGR already set
[  832.543460][ T2346] binder: 2277:2346 unknown command 536871040
[  832.573814][ T7897] binder: unexpected work type, 4, not freed
[  832.582420][ T2278] binder: 2277:2278 ioctl 40046207 0 returned -16
[  832.594040][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  832.607584][ T7897] binder: undelivered transaction 3023, process died.
[  832.621389][ T2346] binder: 2277:2346 ioctl c0306201 20000440 returned -22
03:03:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x20001000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:10 executing program 1:
clock_nanosleep(0x2, 0x700a0a, 0x0, 0x0)

03:03:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {0x0, 0x0, 0xfff}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:10 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
sysinfo(&(0x7f00000001c0)=""/4096)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7a, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x200, 0x0, 0x1010, 0x3, 0xaafd, 0xff, 0x42000, 0x1})
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
eventfd(0x1)
setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000)=0xfffffffffffffff7, 0x4)

[  832.821505][ T2381] binder: 2380:2381 unknown command 536871040
[  832.834727][ T2381] binder: 2380:2381 ioctl c0306201 20000440 returned -22
[  832.846346][ T2381] binder: 2380:2381 ioctl c0306201 200002c0 returned -14
03:03:10 executing program 1:
clock_nanosleep(0x2, 0x800408, 0x0, 0x0)

03:03:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {0xed1, 0x100000000, 0x4, 0xda}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  832.867445][ T2388] binder_alloc: binder_alloc_mmap_handler: 2380 20001000-20004000 already mapped failed -16
[  832.896160][ T2381] binder: BINDER_SET_CONTEXT_MGR already set
[  832.908245][ T2388] binder: 2380:2388 unknown command 536871040
[  832.929348][ T2388] binder: 2380:2388 ioctl c0306201 20000440 returned -22
[  832.952850][ T2381] binder: 2380:2381 ioctl 40046207 0 returned -16
[  832.952855][ T7897] binder: unexpected work type, 4, not freed
[  832.952898][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  832.997648][ T7897] binder: undelivered transaction 3027, process died.
03:03:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x300, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:10 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x400)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x7)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/25)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:11 executing program 1:
clock_nanosleep(0x2, 0x901208, 0x0, 0x0)

[  833.190617][ T2566] binder: 2547:2566 unknown command 536871040
[  833.236837][ T2620] binder: 2547:2620 ioctl c0306201 200002c0 returned -14
[  833.237007][ T2566] binder: 2547:2566 ioctl c0306201 20000440 returned -22
[  833.340493][ T2620] binder_alloc: binder_alloc_mmap_handler: 2547 20001000-20004000 already mapped failed -16
[  833.357021][ T2566] binder: BINDER_SET_CONTEXT_MGR already set
[  833.369909][ T2620] binder: 2547:2620 unknown command 536871040
[  833.376261][ T2566] binder: 2547:2566 ioctl 40046207 0 returned -16
[  833.383022][ T2620] binder: 2547:2620 ioctl c0306201 20000440 returned -22
[  833.390655][ T2566] binder_alloc: 2547: binder_alloc_buf, no vma
[  833.397213][ T5064] binder: unexpected work type, 4, not freed
[  833.404085][ T2566] binder: 2547:2566 transaction failed 29189/-3, size 24-8 line 3147
[  833.412823][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  833.423900][ T5064] binder: undelivered transaction 3031, process died.
[  833.431992][ T2566] binder: 2547:2566 ioctl c0306201 200002c0 returned -14
[  833.444939][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x20002000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0xe40c, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:11 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:11 executing program 1:
clock_nanosleep(0x2, 0x8048000, 0x0, 0x0)

03:03:11 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext, 0x0, 0x1, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x401}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x29}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x800}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffffffffffffb]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

03:03:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x500, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:11 executing program 1:
clock_nanosleep(0x2, 0x8121000, 0x0, 0x0)

[  833.819800][ T2634] binder: 2632:2634 unknown command 536871040
[  833.825947][ T2634] binder: 2632:2634 ioctl c0306201 20000440 returned -22
03:03:11 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x96ef5ecd23501651)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x9, 0x76, 0x9, 0x2, 0x7, 0x0, 0x8, {<r1=>0x0, @in6={{0xa, 0x4e24, 0x7, @loopback, 0x7fff}}, 0x1, 0x40, 0x1000, 0x100, 0x20}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x9, 0x1000, 0xa, 0x401, 0x3, 0xff, 0x9, 0x81, r1}, &(0x7f0000000240)=0x20)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000002c0)={'vlan0\x00', {0x2, 0x4e24, @broadcast}})
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  833.865622][ T2681] binder: 2632:2681 ioctl c0306201 200002c0 returned -14
[  833.949780][ T2681] binder_alloc: binder_alloc_mmap_handler: 2632 20001000-20004000 already mapped failed -16
03:03:11 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x7, 0x0, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@my=0x0})
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x2c, 0x37, 0x2, {0x3, 0x8, 0x80, r1, 0xe, '\x00mime_type[(#['}}, 0x2c)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
write$FUSE_DIRENT(r0, &(0x7f00000001c0)={0x170, 0x0, 0x7, [{0x3, 0x100000000000, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x6}, {0x2, 0x8fb, 0x0, 0x4}, {0x0, 0x1, 0xe, 0x4, '\x00mime_type[(#['}, {0x4, 0x0, 0xd, 0x1, '}security&lo)'}, {0x3, 0x3, 0xf, 0x5, '/dev/sequencer\x00'}, {0x6, 0xbb, 0xe, 0x7f, '\x00mime_type[(#['}, {0x4, 0x1, 0x19, 0x4, ')userprockeyringcpuset!]\\'}, {0x5, 0x6, 0x0, 0x1}, {0x5, 0x1, 0xf, 0xfff, '/dev/sequencer\x00'}]}, 0x170)

03:03:11 executing program 1:
clock_nanosleep(0x2, 0x8129000, 0x0, 0x0)

[  833.990127][ T2634] binder: BINDER_SET_CONTEXT_MGR already set
[  834.034916][ T2634] binder: 2632:2634 ioctl 40046207 0 returned -16
03:03:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  834.104407][ T2766] binder: 2632:2766 unknown command 536871040
[  834.113318][ T2766] binder: 2632:2766 ioctl c0306201 20000440 returned -22
[  834.125437][ T2634] binder_alloc: 2632: binder_alloc_buf, no vma
[  834.133270][ T5064] binder: unexpected work type, 4, not freed
[  834.144984][ T2634] binder: 2632:2634 transaction failed 29189/-3, size 24-8 line 3147
[  834.169290][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  834.177028][ T5064] binder: undelivered transaction 3036, process died.
[  834.184484][ T2634] binder: 2632:2634 ioctl c0306201 200002c0 returned -14
[  834.201244][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x200027c0}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:12 executing program 1:
clock_nanosleep(0x2, 0x8150000, 0x0, 0x0)

03:03:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x600, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:12 executing program 4:
io_setup(0x2, &(0x7f0000000080))
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
write(r0, &(0x7f00000000c0)="6bfd24bccd838dae4e5dc15bd51052a32b2f87a5ca517cd2c03c2950949b71a3b083373b8dec57a83afaf09c974d3f483e464189d786af22f5e8f1b44be03393c67dc0d0455d927b73574c819136c88a8332e14c3e4c330fb3322fb23222367e2718ae2542fdb33b226881b9aa1ecd984e8565719e12be34bd9a51f98dee786a21c18cc00692db46c5556b27f1773648c7e1f2859c1aa47f14", 0x99)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:12 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff2d8, 0x80400)
timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080))
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x4b06, 0x40})

[  834.751553][ T2884] binder: 2883:2884 unknown command 536871040
[  834.764165][ T2884] binder: 2883:2884 ioctl c0306201 20000440 returned -22
03:03:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x0, 0xe40c, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:12 executing program 1:
clock_nanosleep(0x2, 0x8350000, 0x0, 0x0)

[  834.815170][ T2901] binder: 2883:2901 ioctl c0306201 200002c0 returned -14
[  834.851181][ T2901] binder_alloc: binder_alloc_mmap_handler: 2883 20001000-20004000 already mapped failed -16
[  834.905647][ T2884] binder: 2883:2884 unknown command 536871040
[  834.945318][ T2884] binder: 2883:2884 ioctl c0306201 20000440 returned -22
03:03:12 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0xa0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x7)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffbfff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfce9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
clock_nanosleep(0x2, 0x2, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  834.960321][ T5064] binder: undelivered transaction 3041, process died.
[  834.972517][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:12 executing program 1:
clock_nanosleep(0x2, 0xa085000, 0x0, 0x0)

03:03:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x0, 0xe40c, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x700, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  835.249870][ T3132] binder: 3093:3132 unknown command 536871040
[  835.301793][ T3132] binder: 3093:3132 ioctl c0306201 20000440 returned -22
[  835.302637][ T3137] binder: 3093:3137 ioctl c0306201 200002c0 returned -14
[  835.354293][ T3137] binder_alloc: binder_alloc_mmap_handler: 3093 20001000-20004000 already mapped failed -16
[  835.372843][ T3132] binder: BINDER_SET_CONTEXT_MGR already set
[  835.383025][ T3137] binder: 3093:3137 unknown command 536871040
[  835.391704][ T3132] binder: 3093:3132 ioctl 40046207 0 returned -16
[  835.398368][ T3137] binder: 3093:3137 ioctl c0306201 20000440 returned -22
[  835.411917][ T3132] binder_alloc: 3093: binder_alloc_buf, no vma
[  835.418471][ T5064] binder: unexpected work type, 4, not freed
[  835.428174][ T3132] binder: 3093:3132 transaction failed 29189/-3, size 24-8 line 3147
[  835.441095][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  835.448939][ T5064] binder: undelivered transaction 3045, process died.
[  835.458011][ T3132] binder: 3093:3132 ioctl c0306201 200002c0 returned -14
[  835.473876][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x7fffeff1}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:13 executing program 1:
clock_nanosleep(0x2, 0xa0a7000, 0x0, 0x0)

03:03:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x0, 0xe40c, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
clock_nanosleep(0x6, 0x200000001, &(0x7f0000000080), 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:13 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000140)=0xffffffffffffffff, 0x21d)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
accept4$alg(r1, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

03:03:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x1508, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:13 executing program 1:
clock_nanosleep(0x2, 0xff600000, 0x0, 0x0)

03:03:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0x0, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  835.730146][ T3160] binder: 3156:3160 unknown command 536871040
03:03:13 executing program 1:
clock_nanosleep(0x2, 0x150800000000, 0x0, 0x0)

[  835.771543][ T3160] binder: 3156:3160 ioctl c0306201 20000440 returned -22
03:03:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7, 0x0, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  835.824207][ T3173] binder: 3156:3173 ioctl c0306201 200002c0 returned -14
03:03:13 executing program 1:
clock_nanosleep(0x2, 0x350800000000, 0x0, 0x0)

03:03:13 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ip_vti0\x00')
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x7, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  835.893563][ T3160] binder_alloc: binder_alloc_mmap_handler: 3156 20001000-20004000 already mapped failed -16
[  835.953784][ T3160] binder: BINDER_SET_CONTEXT_MGR already set
[  835.988546][ T3173] binder: 3156:3173 unknown command 536871040
[  836.020299][ T7897] binder: unexpected work type, 4, not freed
[  836.028668][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  836.035251][ T3160] binder: 3156:3160 ioctl 40046207 0 returned -16
[  836.064663][ T7897] binder: undelivered transaction 3050, process died.
[  836.074347][ T3173] binder: 3156:3173 ioctl c0306201 20000440 returned -22
[  836.089243][    C0] net_ratelimit: 22 callbacks suppressed
[  836.089259][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  836.100840][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  836.106966][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  836.112892][    C0] protocol 88fb is buggy, dev hsr_slave_1
03:03:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:14 executing program 1:
clock_nanosleep(0x2, 0x60ffffffffff, 0x0, 0x0)

03:03:14 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x800)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf, 0x4, 0x770, 0x4000, r1})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x7}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x2000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:14 executing program 1:
clock_nanosleep(0x2, 0x7fffffffefff, 0x0, 0x0)

[  836.508539][ T3330] binder: 3327:3330 unknown command 536871040
[  836.528387][ T3330] binder: 3327:3330 ioctl c0306201 20000440 returned -22
03:03:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x9, 0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfd, 0x10000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x5, 0xffffffffffff0bd0}, 0x30}, 0x10)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x40140)

03:03:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x7}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  836.570372][ T3343] binder: 3327:3343 ioctl c0306201 200002c0 returned -14
[  836.601323][ T3343] binder_alloc: binder_alloc_mmap_handler: 3327 20001000-20004000 already mapped failed -16
[  836.641754][ T3330] binder: BINDER_SET_CONTEXT_MGR already set
[  836.678704][ T3343] binder: 3327:3343 unknown command 536871040
[  836.680255][ T3330] binder: 3327:3330 ioctl 40046207 0 returned -16
03:03:14 executing program 1:
clock_nanosleep(0x2, 0x10120800000000, 0x0, 0x0)

[  836.719605][ T5064] binder: unexpected work type, 4, not freed
[  836.726729][ T3343] binder: 3327:3343 ioctl c0306201 20000440 returned -22
[  836.735614][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  836.773521][ T5064] binder: undelivered transaction 3054, process died.
03:03:14 executing program 1:
clock_nanosleep(0x2, 0x50080a00000000, 0x0, 0x0)

03:03:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x8, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x3508, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  837.068186][ T3472] binder: 3470:3472 unknown command 536871040
[  837.101899][ T3472] binder: 3470:3472 ioctl c0306201 20000440 returned -22
[  837.129738][ T3476] binder: 3470:3476 ioctl c0306201 200002c0 returned -14
[  837.129833][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  837.141043][ T3476] binder_alloc: binder_alloc_mmap_handler: 3470 20001000-20004000 already mapped failed -16
[  837.144102][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  837.153125][ T3472] binder: BINDER_SET_CONTEXT_MGR already set
[  837.184021][ T3476] binder: 3470:3476 unknown command 536871040
[  837.202614][ T7897] binder: unexpected work type, 4, not freed
[  837.208789][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  837.215005][ T3472] binder: 3470:3472 ioctl 40046207 0 returned -16
[  837.222215][ T7897] binder: undelivered transaction 3058, process died.
[  837.229692][ T3476] binder: 3470:3476 ioctl c0306201 20000440 returned -22
03:03:15 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x0, 0xfffffffffffffffe, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:15 executing program 1:
clock_nanosleep(0x2, 0x700a0a00000000, 0x0, 0x0)

03:03:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x2000000000, 0x0, 0x2, {r2, r3+10000000}, 0x7f, 0x6})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1e9f252ba23bc4a5}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x28}}, 0x4)

03:03:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x3f00, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  837.370969][ T3487] binder: 3484:3487 unknown command 536871040
[  837.377107][ T3487] binder: 3484:3487 ioctl c0306201 20000440 returned -22
03:03:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  837.449255][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  837.455148][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  837.461072][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  837.466887][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:15 executing program 1:
clock_nanosleep(0x2, 0x80040800000000, 0x0, 0x0)

[  837.516911][ T3487] binder: 3484:3487 ioctl c0306201 200002c0 returned -14
[  837.556630][ T3595] binder_alloc: binder_alloc_mmap_handler: 3484 20001000-20004000 already mapped failed -16
03:03:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x274, 0xec, 0x0, 0xec, 0xec, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, &(0x7f0000000080), {[{{@ip={@local, @local, 0xff000000, 0xff0000ff, 'gretap0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x84, 0x2, 0x21}, 0x0, 0xbc, 0xec, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x7ef}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x8, 0x1, 0x3090}, {0x8000, 0x1, 0x6}, 0x80000000, 0x1a30000000000}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x80000, 0xffffff00, 0xe7d9bd20640e7cbf, 'ip_vti0\x00', 'lapb0\x00', {}, {0xff}, 0x3f, 0x2, 0xf}, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x42495374, 0x7, [0xf, 0x2b, 0x19, 0x17, 0x16, 0x32, 0x2b, 0x8, 0x31, 0x2b, 0xb, 0x17, 0x3e, 0x1, 0x3c, 0x14], 0x1, 0x8, 0xffffffffffff7fff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8219}, 0x8)

[  837.602709][ T3487] binder: BINDER_SET_CONTEXT_MGR already set
03:03:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0xa, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:15 executing program 1:
clock_nanosleep(0x2, 0x90120800000000, 0x0, 0x0)

03:03:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  837.657545][ T3487] binder: 3484:3487 ioctl 40046207 0 returned -16
[  837.678864][ T3605] binder: 3484:3605 unknown command 536871040
[  837.737793][ T3605] binder: 3484:3605 ioctl c0306201 20000440 returned -22
[  837.748863][ T7897] binder: undelivered transaction 3062, process died.
03:03:15 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0xff, 0x8000)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@loopback, 0x4, r2})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:15 executing program 1:
clock_nanosleep(0x2, 0xffefffffff7f0000, 0x0, 0x0)

[  837.786490][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x10, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4800, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:15 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040))
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  837.993850][ T3739] binder: 3738:3739 unknown command 536871040
03:03:15 executing program 1:
clock_nanosleep(0x2, 0xffffffffff600000, 0x0, 0x0)

03:03:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, 0x0, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  838.043560][ T3739] binder: 3738:3739 ioctl c0306201 20000440 returned -22
[  838.053938][ T3748] binder: 3738:3748 ioctl c0306201 200002c0 returned -14
03:03:16 executing program 1:
clock_settime(0x5, &(0x7f0000000000)={0x0, 0x989680})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  838.097107][ T3739] binder_alloc: binder_alloc_mmap_handler: 3738 20001000-20004000 already mapped failed -16
03:03:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0xf}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:16 executing program 2:
r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x101000)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xffff, 0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x9, 0xfff, 0x1, 0x3f, 0xffffffff, 0x6, 0x20, 0xfffffffffffffff9, 0x9, 0x8001, 0x101, 0x5fca, 0xff, 0x400, 0x8000, 0x4, 0xc271, 0x6, 0x10001, 0x7fffffff, 0xa40, 0x7, 0x4, 0x2ae, 0x0, 0x5, 0x9cd, 0x7ff, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000, 0x100}, 0x8000, 0xcd8, 0x7, 0x2, 0x8000000000003ff, 0x7, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffff9c, 0x9)
clock_nanosleep(0x7, 0x200, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, 0x0, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  838.184317][ T3748] binder: 3738:3748 unknown command 536871040
[  838.184627][ T3739] binder: BINDER_SET_CONTEXT_MGR already set
[  838.248553][ T3739] binder: 3738:3739 ioctl 40046207 0 returned -16
[  838.255227][ T7897] binder: unexpected work type, 4, not freed
[  838.261674][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  838.285591][ T7897] binder: undelivered transaction 3066, process died.
[  838.309708][ T3748] binder: 3738:3748 ioctl c0306201 20000440 returned -22
03:03:16 executing program 4:
getgid()
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
socket$netlink(0x10, 0x3, 0xd)
r0 = syz_open_dev$mouse(0x0, 0x51d, 0x8000000000000008)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = gettid()
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100))
prctl$PR_SET_PTRACER(0x59616d61, r3)
clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={r1, r2+30000000}, &(0x7f0000000080))
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x47)

03:03:16 executing program 1:
clock_nanosleep(0x4, 0x7ffffe, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0xa, 0x7, [{0x6, 0x0, 0x8001}, {0x9, 0x0, 0x6}, {0x4, 0x0, 0x5}, {0x9, 0x0, 0x1}, {0x8, 0x0, 0xf720}, {0xa9aae5f, 0x0, 0x8001}, {0x800, 0x0, 0x7}, {0xffffffffffff67a9, 0x0, 0x81}, {0x40, 0x0, 0xea}, {0x3, 0x0, 0xffffffffffffffa5}]})

03:03:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, 0x0, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4c00, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:16 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffeff, 0x2000)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x2400000000000000, 0x4)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  838.520196][ T4036] binder: 4035:4036 unknown command 536871040
03:03:16 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='%keyringbdevlolovboxnet0em1userposix_acl_access\x00', 0x1)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3)
open(&(0x7f0000000200)='./file0\x00', 0x1e9000, 0x20)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x30000, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0xe5c}], 0xffffffa8)
clock_nanosleep(0x7, 0x2, 0x0, 0x0)

[  838.578988][ T4036] binder: 4035:4036 ioctl c0306201 20000440 returned -22
[  838.579336][ T4087] binder: 4035:4087 ioctl c0306201 200002c0 returned -14
03:03:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:16 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x4201)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)

[  838.716113][ T4087] binder_alloc: binder_alloc_mmap_handler: 4035 20001000-20004000 already mapped failed -16
03:03:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x2}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  838.808074][ T4087] binder: 4035:4087 unknown command 536871040
[  838.816141][ T4036] binder: BINDER_SET_CONTEXT_MGR already set
[  838.828968][ T4087] binder: 4035:4087 ioctl c0306201 20000440 returned -22
[  838.863142][ T4036] binder: 4035:4036 ioctl 40046207 0 returned -16
[  838.866441][ T5064] binder: unexpected work type, 4, not freed
[  838.876211][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:16 executing program 1:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x28002, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

03:03:16 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x121000, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xfffffffffffffffd)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  838.910622][ T5064] binder: undelivered transaction 3070, process died.
[  838.982932][ T4408] QAT: Invalid ioctl
[  839.023207][ T4408] QAT: Invalid ioctl
03:03:17 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x10000)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080))

03:03:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:17 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1ff, 0x400)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={<r2=>0x0, 0x1, 0x20}, &(0x7f0000000180)=0xc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2, 0xfff}, 0x8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r3=>0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000240)={0x1, 0x0, 0x7c, 0x0, r3})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x2)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x0, 0xb, 0x1})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x4, 0x4, 0x9, 0x0, 0xf})

03:03:17 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="e95b88e29cb95ebb2a85b8dc90d00411aa32110b47d83611efc815c20a96b2618aa9f080e508e860a59aa428c67c7847359da6467fd7770170fcd275be21b5136e8367e2ccab75e3db0e4f58ec03864b961ff36d499ff081068de5ee2d20f38a0e083e5c29fdf154de7f4ccc94aaf0dee11bd2b0060b1cde97707bd49bed2a7c8574d77a370f1709282b575656803cb767715463bd1ff862415a23a06b35c7e7e464ea94cd70f4ac7b735f2f18132a5c1a11b1", 0xb3, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='md5sum/procvboxnet0bdev\xe2*cgroup@\x00', r0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  839.321669][ T4627] binder: 4624:4627 unknown command 536871040
[  839.337658][ T4627] binder: 4624:4627 ioctl c0306201 20000440 returned -22
03:03:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:17 executing program 1:
timer_create(0x7, &(0x7f0000000240)={0x0, 0xe, 0x0, @thr={&(0x7f0000000140)="a4fc50ba4ecc9a5a18af14a37b789fa8ea72297143d5c3ffe86a33e55d3a12d35d38549b074b34056464d480df406eb4cff69a14bb04acfc050bbb328492ff6ad58f6d33f03e868b9c0ef9f7d2a9d969057f0dd36f26604318db3b48b85e5378ae66a2bd8cb4cccd6e0ff4e119d8c3abdc01732e23525810fd7c686a189d9c8f263f25448a5e71e893e6c6e3541306ad90165b7e38947cc61a0cc58d1ba97c6150daf6aa", &(0x7f0000000200)="5f87ec70b209e84047db42b9208625ac329fef767982e1bd92e4b1beb1bc63c9b9b53d67cd65d58f61eda00893"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {r1, r2+10000000}}, &(0x7f0000000100))
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  839.414908][ T4755] binder: 4624:4755 ioctl c0306201 200002c0 returned -14
03:03:17 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x3ffffd)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  839.560038][ T4755] binder_alloc: binder_alloc_mmap_handler: 4624 20001000-20004000 already mapped failed -16
[  839.597556][ T4627] binder: BINDER_SET_CONTEXT_MGR already set
[  839.605784][ T4755] binder: 4624:4755 unknown command 536871040
[  839.626332][ T4627] binder: 4624:4627 ioctl 40046207 0 returned -16
03:03:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  839.651870][ T5064] binder: unexpected work type, 4, not freed
[  839.657973][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  839.666226][ T4755] binder: 4624:4755 ioctl c0306201 20000440 returned -22
03:03:17 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1000, 0x1)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="c9856c191cd3", 'erspan0\x00'}}, 0x1e)
clock_nanosleep(0x2, 0x2, 0x0, 0x0)

[  839.702112][ T5064] binder: undelivered transaction 3074, process died.
03:03:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x2}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:17 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x50000, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={r2, r3/1000+10000}, 0x8)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=<r4=>0x0)
semget$private(0x0, 0x4, 0x10)
write$FUSE_LK(r0, &(0x7f00000001c0)={0x28, 0x0, 0x6, {{0x40, 0x8001, 0x0, r4}}}, 0x28)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x22001, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r5 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x200, 0x2, 0x9}, 0x8)
socket$inet6_udp(0xa, 0x2, 0x0)

03:03:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x60ff, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x35a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  839.907876][ T5100] binder: 5097:5100 unknown command 536871040
[  839.933798][ T5100] binder: 5097:5100 ioctl c0306201 20000440 returned -22
[  839.946229][ T5100] binder: 5097:5100 ioctl c0306201 200002c0 returned -14
[  839.984804][ T5201] binder_alloc: binder_alloc_mmap_handler: 5097 20001000-20004000 already mapped failed -16
03:03:17 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r1, 0x500, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1893}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd930}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100000001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x8011}, 0x40000)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r2=>0x0)
getpgrp(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000340)=0xf, 0x4)

[  840.044202][ T5100] binder: BINDER_SET_CONTEXT_MGR already set
[  840.118596][ T5280] binder: 5097:5280 unknown command 536871040
[  840.125615][ T5280] binder: 5097:5280 ioctl c0306201 20000440 returned -22
[  840.137111][ T5064] binder: unexpected work type, 4, not freed
[  840.145508][ T5201] binder_alloc: 5097: binder_alloc_buf, no vma
[  840.152657][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  840.159338][ T5100] binder: 5097:5100 ioctl 40046207 0 returned -16
03:03:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  840.166480][ T5064] binder: undelivered transaction 3078, process died.
[  840.173997][ T5201] binder: 5097:5201 transaction failed 29189/-3, size 24-8 line 3147
03:03:18 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  840.215740][ T5201] binder: 5097:5201 ioctl c0306201 200002c0 returned -14
[  840.244594][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6800, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  840.419077][ T5394] binder: 5390:5394 unknown command 536871040
[  840.454210][ T5394] binder: 5390:5394 ioctl c0306201 20000440 returned -22
03:03:18 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x10000)

[  840.512127][ T5424] binder: 5390:5424 ioctl c0306201 200002c0 returned -14
[  840.584786][ T5424] binder_alloc: binder_alloc_mmap_handler: 5390 20001000-20004000 already mapped failed -16
03:03:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x2}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:18 executing program 1:
clock_nanosleep(0x2, 0xfffffffffffffffb, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x9, 0x8, 0x6, 0x0, 0x101, 0x8, 0x7, 0x1, 0xce, 0x1000, 0x9, 0x10000, 0x0, 0xb31d, 0x4, 0x3, 0x42, 0x7fff, 0x7fffffff})

03:03:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  840.721721][ T5394] binder: BINDER_SET_CONTEXT_MGR already set
[  840.727781][ T5394] binder: 5390:5394 ioctl 40046207 0 returned -16
[  840.727824][ T7897] binder: undelivered transaction 3083, process died.
[  840.756662][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:18 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2, 0x0)
bind(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0xe0f265533288cbd9, 0x1, 0x3}}, 0x80)
inotify_init1(0x80000)

03:03:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf00}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6c00, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, 0x0, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  841.063851][ T5653] binder: 5644:5653 unknown command 536871040
[  841.105698][ T5653] binder: 5644:5653 ioctl c0306201 20000440 returned -22
03:03:19 executing program 1:
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x48001, 0x0)

03:03:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  841.217206][ T5716] binder: 5644:5716 ioctl c0306201 200002c0 returned -14
[  841.262473][ T5716] binder_alloc: binder_alloc_mmap_handler: 5644 20001000-20004000 already mapped failed -16
[  841.300050][    C0] net_ratelimit: 18 callbacks suppressed
[  841.300099][    C0] protocol 88fb is buggy, dev hsr_slave_0
03:03:19 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1094c0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="090000080000000000008009000100d501000007000000"])
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  841.311768][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  841.331316][ T5653] binder: BINDER_SET_CONTEXT_MGR already set
[  841.382294][ T5653] binder: 5644:5653 ioctl 40046207 0 returned -16
[  841.395273][ T5765] binder: 5644:5765 unknown command 536871040
[  841.435479][ T5716] binder_alloc: 5644: binder_alloc_buf, no vma
03:03:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  841.478417][ T7897] binder: unexpected work type, 4, not freed
[  841.486575][ T5716] binder: 5644:5716 transaction failed 29189/-3, size 24-8 line 3147
[  841.498539][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  841.537064][ T7897] binder: undelivered transaction 3087, process died.
[  841.573509][ T5716] binder: 5644:5716 ioctl c0306201 200002c0 returned -14
[  841.586749][ T5765] binder: 5644:5765 ioctl c0306201 20000440 returned -22
[  841.610016][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  841.616517][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  841.623946][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  841.630466][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  841.637673][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  841.644671][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x2}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:19 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x1, 0x2)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000006ac5e907559d16fc3a8f0ec8bb00c25e912ca431f740b9a615f6f9d74bf97993cfa3c38e2a9787f5d54b75b36cbc1d2ebf869e12a8c9d05e50ef4468a0e63cbee3019d3c0b18749eaa1c716834d7ca8e5268390bcc769146ba5ed7e2ef905833060b5b40995a3fb0beb02adcab16ebe483ad44283590440a44da0dcfe5", @ANYRES16=r1, @ANYBLOB="040a26bd7000ffdbdf25010000000c00050008000000000000000c00030001000000000000000c00050000010000000000000c00060002000000000000000c00050008000000000000000c0005000401000000000000"], 0x5c}}, 0x4008080)
syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x1a934ae0, 0x105100)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=<r2=>0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x100000001, 0x5, 0x0, 0x5, 0x0, 0x101, 0x90280, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff00000000, 0x1, 0x2, 0x2, 0x8, 0x2, 0x420, 0x5, 0x6, 0x1, 0xf99, 0x0, 0x6, 0x2, 0x101, 0x200, 0x0, 0x8, 0x2, 0x218, 0x3, 0x3, 0xfff, 0x5, 0x8, 0x4, 0x0, 0xffffffffffff8000, 0x2, @perf_config_ext={0x28dc, 0x7}, 0x20, 0x1, 0x7, 0x0, 0x9, 0x6, 0x2}, r2, 0x6, r0, 0x3)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/122)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000400)={0x6, &(0x7f0000000000)=[0xffff, 0x80000000, 0x0, 0x3ff, 0x6, 0x10000]})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

03:03:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  841.754723][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7400, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x5a03}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:19 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x8040000)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)

[  841.905816][ T6004] binder: 6003:6004 unknown command 536871040
[  841.974078][ T6004] binder: 6003:6004 ioctl c0306201 20000440 returned -22
[  842.033598][ T6035] binder: 6003:6035 ioctl c0306201 200002c0 returned -14
[  842.126272][ T6035] binder_alloc: binder_alloc_mmap_handler: 6003 20001000-20004000 already mapped failed -16
03:03:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

03:03:20 executing program 1:
clock_nanosleep(0x1, 0x0, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400, 0x0)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000440)={0xffffffff, 0x7})
r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="3587453ff37f7c4818afe272e8bf4cfa6ee6adc22c30c7e40cab9ba35f9dc9e05eee4a149bb444b9ddd0d45e503a87c9501f27de25967b520f1350a747a68357fd1298185715f0c1264a29d440449db312836804c965f5ad73dbeafff8f9d81f57fef061f249befcbc5fbd052f6aac446d8749aa3cdff7d62f001ccd2fe5fc428c224b30ab1295df062ae601273b34325b46276ba5c0db4074bcb19f50fbb2f49f91f1a65ba132f965bf66d8c0f0dc702512f8f570ab98ea57f3f3e911cbc8f51c3f67ca5e46d8f3eb5c51566219b5a1d4793b0bfdc7e12f8f91691d2cb2dc297190cc6a651e3d63a2f5", 0xea, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={r1, 0x8001, 0x5}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'sha224-ssse3\x00'}}, &(0x7f0000000300)="178081684e3e4b22971381e40f9c2533a3f43a19ebb64289df508b3d6319ae843d9be7e351519163851b54c3c5244a1f479574ea43c490978367ac3285eef8d71a18fe0e9a0457ba8b26939ffe83c9676e792ec56bcbcfa496b801a7b7ea4369de6e", &(0x7f0000000380)=""/177)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffff7d, 0xa0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x7, 0x6, 0x40, &(0x7f0000ffc000/0x4000)=nil, 0x5})

[  842.260010][ T5064] binder: undelivered transaction 3092, process died.
[  842.283101][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1b4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(r0, 0x29, 0x1b, 0x0, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  842.330060][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  842.336807][    C0] protocol 88fb is buggy, dev hsr_slave_1
03:03:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7a00, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  842.552295][ T6221] binder: 6191:6221 unknown command 536871040
[  842.592716][ T6221] binder: 6191:6221 ioctl c0306201 20000440 returned -22
[  842.644803][ T6264] binder: 6191:6264 ioctl c0306201 200002c0 returned -14
03:03:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:20 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8255458de39eb061, 0x9, 0x100800)
r0 = dup(0xffffffffffffffff)
getsockopt$inet_buf(r0, 0x0, 0x34, &(0x7f0000000280)=""/84, &(0x7f0000000300)=0x54)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

[  842.737381][ T6264] binder_alloc: binder_alloc_mmap_handler: 6191 20001000-20004000 already mapped failed -16
[  842.779054][ T6221] binder: BINDER_SET_CONTEXT_MGR already set
03:03:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x2000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  842.827756][ T6221] binder: 6191:6221 ioctl 40046207 0 returned -16
[  842.843952][ T6395] mmap: syz-executor.1 (6395) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  842.910302][ T6397] binder: 6191:6397 unknown command 536871040
[  842.916535][ T6397] binder: 6191:6397 ioctl c0306201 20000440 returned -22
03:03:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4800, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  843.036000][ T6221] binder_alloc: 6191: binder_alloc_buf, no vma
[  843.118214][ T5064] binder: unexpected work type, 4, not freed
[  843.129486][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  843.136023][ T6221] binder: 6191:6221 transaction failed 29189/-3, size 24-8 line 3147
[  843.158781][ T6503] binder: BINDER_SET_CONTEXT_MGR already set
03:03:21 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x90401, 0x0)
timerfd_gettime(r0, &(0x7f0000000080))
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0xffffffff, 0x66dc6e7654d3f0d5)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040))

03:03:21 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x800)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf, 0x4, 0x770, 0x4000, r1})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  843.193423][ T6503] binder: 6502:6503 ioctl 40046207 0 returned -16
[  843.193519][ T5064] binder: undelivered transaction 3096, process died.
03:03:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xc309, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  843.259215][ T6221] binder: 6191:6221 ioctl c0306201 200002c0 returned -14
[  843.266410][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
[  843.281088][ T6503] binder: 6502:6503 unknown command 536871040
[  843.287460][ T6503] binder: 6502:6503 ioctl c0306201 20000440 returned -22
[  843.357654][ T6527] binder: 6521:6527 unknown command 536871040
[  843.375026][ T6527] binder: 6521:6527 ioctl c0306201 20000440 returned -22
[  843.407608][ T6674] binder: 6521:6674 ioctl c0306201 200002c0 returned -14
[  843.434526][ T6503] binder: 6502:6503 ioctl c0306201 200002c0 returned -14
[  843.471504][ T6674] binder_alloc: binder_alloc_mmap_handler: 6521 20001000-20004000 already mapped failed -16
[  843.502808][ T5064] binder: unexpected work type, 4, not freed
[  843.515487][ T6527] binder: BINDER_SET_CONTEXT_MGR already set
[  843.520669][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  843.543637][ T6674] binder: 6521:6674 unknown command 536871040
[  843.559365][ T6527] binder: 6521:6527 ioctl 40046207 0 returned -16
03:03:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$rfkill(r0, &(0x7f0000000000)={0x391000000000000, 0x0, 0x0, 0x1}, 0x8)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:21 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x800)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf, 0x4, 0x770, 0x4000, r1})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:21 executing program 1:
prctl$PR_SET_PDEATHSIG(0x1, 0x2)
clock_nanosleep(0x7, 0x1, 0x0, 0x0)

03:03:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x6, 0x6, 0xffffffffffffa291, 0xffff7fff}, {0x1000, 0x1ff, 0x8173, 0x7}, {0x0, 0xe40c, 0x9450}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="6433fb1708776dd5ce2266aeff5212e44f7cb1b3575f5442ba932928ed98", 0x1e}], 0x1, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  843.567158][ T6674] binder: 6521:6674 ioctl c0306201 20000440 returned -22
[  843.607884][ T7897] binder: unexpected work type, 4, not freed
[  843.614638][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  843.646701][ T7897] binder: undelivered transaction 3104, process died.
[  843.675477][ T7897] binder: undelivered transaction 3101, process died.
03:03:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000000)={<r1=>0x0, 0x68, "eec74357aaee163bea15c6fdd279fe9d064ba2fcbb935db850ca0bc0fa39a78d880a420d5bc5773dd3e498f8c1d4c88d326f949a997146244d80dd30066d912038aca9ee199d6b59907a9008efcfc597cad9b8ded6522faa5809719ecf57f0938158063563f4e18d"}, &(0x7f0000000080)=0x70)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x101208, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:21 executing program 1:
clock_nanosleep(0xffffffffffffffff, 0x2, 0x0, 0x0)

[  843.791183][ T6831] binder: 6806:6831 unknown command 536871040
03:03:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xc309, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:21 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x800)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf, 0x4, 0x770, 0x4000, r1})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  843.831972][ T6831] binder: 6806:6831 ioctl c0306201 20000440 returned -22
[  843.859803][ T6844] binder: 6806:6844 ioctl c0306201 200002c0 returned -14
03:03:21 executing program 1:
clock_nanosleep(0x7, 0x1, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4081)
ioctl$RTC_AIE_OFF(r0, 0x7002)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x3, 0x5})
geteuid()
fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0])

[  843.892254][ T6844] binder_alloc: binder_alloc_mmap_handler: 6806 20001000-20004000 already mapped failed -16
[  843.911332][ T6847] binder: BINDER_SET_CONTEXT_MGR already set
[  843.958736][ T6847] binder: 6846:6847 ioctl 40046207 0 returned -16
[  843.967747][ T6855] binder: 6846:6855 unknown command 536871040
[  843.975650][ T6831] binder: BINDER_SET_CONTEXT_MGR already set
[  843.983383][ T6831] binder: 6806:6831 ioctl 40046207 0 returned -16
[  843.990543][ T6855] binder: 6846:6855 ioctl c0306201 20000440 returned -22
[  844.002895][ T6884] binder: 6806:6884 unknown command 536871040
[  844.033669][ T6884] binder: 6806:6884 ioctl c0306201 20000440 returned -22
[  844.042670][ T6847] binder_alloc: 6806: binder_alloc_buf, no vma
[  844.067652][ T6847] binder: 6846:6847 transaction failed 29189/-3, size 24-8 line 3147
03:03:21 executing program 1:
socket$inet6_dccp(0xa, 0x6, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40002, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f00000001c0)={0x3, 0x6, 0x1, 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})

[  844.078540][ T6831] binder_alloc: 6806: binder_alloc_buf, no vma
[  844.099682][ T7897] binder: unexpected work type, 4, not freed
[  844.106423][ T6831] binder: 6806:6831 transaction failed 29189/-3, size 24-8 line 3147
[  844.114939][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  844.146642][ T6847] binder: 6846:6847 ioctl c0306201 200002c0 returned -14
[  844.159818][ T6831] binder: 6806:6831 ioctl c0306201 200002c0 returned -14
[  844.164460][ T7897] binder: undelivered transaction 3108, process died.
[  844.209969][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
[  844.229623][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x4, 0x4, 0x1000})
syz_open_dev$mouse(0x0, 0x0, 0xfffd)

03:03:22 executing program 2 (fault-call:3 fault-nth:0):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x800408, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:22 executing program 5 (fault-call:7 fault-nth:0):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:22 executing program 1:
clock_nanosleep(0xa, 0x1000000000001, 0x0, 0x0)

03:03:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x5a030000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  844.544542][ T7177] binder: 7175:7177 unknown command 536871040
[  844.569749][ T7181] FAULT_INJECTION: forcing a failure.
[  844.569749][ T7181] name failslab, interval 1, probability 0, space 0, times 0
03:03:22 executing program 1:
socket$can_bcm(0x1d, 0x2, 0x2)

[  844.589726][ T7176] FAULT_INJECTION: forcing a failure.
[  844.589726][ T7176] name failslab, interval 1, probability 0, space 0, times 0
[  844.595411][ T7177] binder: 7175:7177 ioctl c0306201 20000440 returned -22
[  844.641884][ T7181] CPU: 0 PID: 7181 Comm: syz-executor.2 Not tainted 5.1.0-rc2+ #41
[  844.649828][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  844.659902][ T7181] Call Trace:
[  844.663266][ T7181]  dump_stack+0x172/0x1f0
[  844.667633][ T7181]  should_fail.cold+0xa/0x15
[  844.672277][ T7181]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  844.678123][ T7181]  ? ___might_sleep+0x163/0x280
[  844.683017][ T7181]  __should_failslab+0x121/0x190
[  844.687987][ T7181]  should_failslab+0x9/0x14
[  844.692519][ T7181]  kmem_cache_alloc_trace+0x2d1/0x760
[  844.697934][ T7181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  844.704321][ T7181]  ? security_capable+0x9b/0xd0
[  844.709315][ T7181]  do_seccomp+0x743/0x2250
[  844.713785][ T7181]  ? __seccomp_filter+0x1440/0x1440
[  844.719013][ T7181]  ? kasan_check_write+0x14/0x20
[  844.723986][ T7181]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  844.729570][ T7181]  ? alloc_chunk+0xf2/0x220
[  844.734106][ T7181]  ? yama_task_prctl+0x288/0x3e0
[  844.739083][ T7181]  prctl_set_seccomp+0x4e/0x70
[  844.744410][ T7181]  __ia32_sys_prctl+0x536/0xfe0
[  844.749385][ T7181]  ? __x64_sys_prctl+0xf80/0xf80
[  844.754362][ T7181]  ? __x64_sys_prctl+0xf80/0xf80
[  844.759335][ T7181]  do_fast_syscall_32+0x281/0xc98
[  844.764394][ T7181]  entry_SYSENTER_compat+0x70/0x7f
[  844.769531][ T7181] RIP: 0023:0xf7f3c869
[  844.773801][ T7181] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  844.793518][ T7181] RSP: 002b:00000000f5d380cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ac
[  844.801955][ T7181] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000002
[  844.809954][ T7181] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000
[  844.817956][ T7181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  844.825949][ T7181] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  844.833945][ T7181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
03:03:22 executing program 1:
keyctl$session_to_parent(0x12)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  844.845060][ T7176] CPU: 1 PID: 7176 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  844.852988][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  844.855368][ T7183] binder: 7175:7183 ioctl c0306201 200002c0 returned -14
[  844.863085][ T7176] Call Trace:
[  844.863117][ T7176]  dump_stack+0x172/0x1f0
[  844.863136][ T7176]  should_fail.cold+0xa/0x15
[  844.863155][ T7176]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  844.863175][ T7176]  ? ___might_sleep+0x163/0x280
[  844.863195][ T7176]  __should_failslab+0x121/0x190
[  844.863212][ T7176]  should_failslab+0x9/0x14
[  844.863227][ T7176]  __kmalloc+0x2dc/0x740
[  844.863262][ T7176]  ? af_alg_release+0xc0/0xc0
[  844.898183][ T7176]  ? lock_sock_nested+0x9a/0x120
[  844.898197][ T7176]  ? sock_kmalloc+0xc6/0x120
[  844.898214][ T7176]  sock_kmalloc+0xc6/0x120
[  844.898246][ T7176]  af_alg_alloc_areq+0x24/0x1e0
[  844.898276][ T7176]  aead_recvmsg+0x45d/0x1ab0
[  844.916683][ T7176]  ? aead_release+0x50/0x50
[  844.916702][ T7176]  ? apparmor_socket_recvmsg+0x2a/0x30
[  844.916727][ T7176]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  844.926748][ T7183] binder_alloc: binder_alloc_mmap_handler: 7175 20001000-20004000 already mapped failed -16
[  844.930588][ T7176]  ? security_socket_recvmsg+0x9b/0xd0
[  844.930609][ T7176]  ? aead_release+0x50/0x50
[  844.930628][ T7176]  sock_recvmsg+0xd0/0x110
[  844.930643][ T7176]  ? __sock_recv_ts_and_drops+0x590/0x590
[  844.930658][ T7176]  ___sys_recvmsg+0x273/0x5a0
[  844.930679][ T7176]  ? ___sys_sendmsg+0x930/0x930
03:03:22 executing program 1:
clock_nanosleep(0x7, 0x5, 0x0, 0x0)

[  844.930705][ T7176]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  844.940208][ T7177] binder: BINDER_SET_CONTEXT_MGR already set
[  844.945297][ T7176]  ? kasan_check_read+0x11/0x20
[  844.945317][ T7176]  ? __fget+0x381/0x550
[  844.945339][ T7176]  ? ksys_dup3+0x3e0/0x3e0
[  844.945361][ T7176]  ? __fget_light+0x1a9/0x230
[  844.945383][ T7176]  ? __fdget+0x1b/0x20
[  844.982821][ T7183] binder: 7175:7183 unknown command 536871040
[  844.986498][ T7176]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  844.986524][ T7176]  do_recvmmsg+0x593/0x7a0
[  844.986545][ T7176]  ? ___sys_recvmsg+0x5a0/0x5a0
[  844.986572][ T7176]  ? kasan_check_write+0x14/0x20
[  844.986601][ T7176]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  845.003807][ T7176]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  845.012823][ T7176]  __sys_recvmmsg+0x259/0x270
[  845.012840][ T7176]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  845.012856][ T7176]  ? __ia32_sys_read+0xb0/0xb0
[  845.012872][ T7176]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  845.012887][ T7176]  ? do_fast_syscall_32+0xd1/0xc98
[  845.012912][ T7176]  ? entry_SYSENTER_compat+0x70/0x7f
[  845.034926][ T5064] binder: unexpected work type, 4, not freed
[  845.038490][ T7176]  ? do_fast_syscall_32+0xd1/0xc98
[  845.038517][ T7176]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  845.038536][ T7176]  do_fast_syscall_32+0x281/0xc98
[  845.038557][ T7176]  entry_SYSENTER_compat+0x70/0x7f
[  845.038579][ T7176] RIP: 0023:0xf7efe869
[  845.044417][ T7177] binder: 7175:7177 ioctl 40046207 0 returned -16
[  845.047873][ T7176] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  845.047881][ T7176] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  845.047896][ T7176] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  845.047904][ T7176] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  845.047912][ T7176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  845.047920][ T7176] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  845.047928][ T7176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  845.109913][ T7183] binder: 7175:7183 ioctl c0306201 20000440 returned -22
[  845.121642][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:23 executing program 5 (fault-call:7 fault-nth:1):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:23 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2f4, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff5bf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c580}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @remote, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbb8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @loopback, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc432}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf92e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x92}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x976}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

03:03:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  845.381078][ T7302] FAULT_INJECTION: forcing a failure.
[  845.381078][ T7302] name failslab, interval 1, probability 0, space 0, times 0
[  845.396337][ T7302] CPU: 0 PID: 7302 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  845.404285][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  845.414451][ T7302] Call Trace:
[  845.417789][ T7302]  dump_stack+0x172/0x1f0
[  845.422160][ T7302]  should_fail.cold+0xa/0x15
[  845.426784][ T7302]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  845.432630][ T7302]  ? ___might_sleep+0x163/0x280
[  845.437513][ T7302]  __should_failslab+0x121/0x190
[  845.442584][ T7302]  should_failslab+0x9/0x14
[  845.442601][ T7302]  __kmalloc+0x2dc/0x740
[  845.442619][ T7302]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  845.442634][ T7302]  ? iov_iter_advance+0x295/0xf70
[  845.442647][ T7302]  ? sock_kmalloc+0xc6/0x120
[  845.442663][ T7302]  sock_kmalloc+0xc6/0x120
[  845.442683][ T7302]  af_alg_get_rsgl+0xd9/0x6b0
[  845.442710][ T7302]  aead_recvmsg+0x4b6/0x1ab0
[  845.451500][ T7302]  ? aead_release+0x50/0x50
[  845.485187][ T7302]  ? apparmor_socket_recvmsg+0x2a/0x30
[  845.490678][ T7302]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  845.496956][ T7302]  ? security_socket_recvmsg+0x9b/0xd0
[  845.502445][ T7302]  ? aead_release+0x50/0x50
[  845.502466][ T7302]  sock_recvmsg+0xd0/0x110
[  845.502480][ T7302]  ? __sock_recv_ts_and_drops+0x590/0x590
[  845.502494][ T7302]  ___sys_recvmsg+0x273/0x5a0
[  845.502515][ T7302]  ? ___sys_sendmsg+0x930/0x930
[  845.502530][ T7302]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  845.502549][ T7302]  ? kasan_check_read+0x11/0x20
[  845.502569][ T7302]  ? lockdep_hardirqs_on+0x418/0x5d0
[  845.502584][ T7302]  ? retint_kernel+0x2d/0x2d
[  845.502601][ T7302]  ? trace_hardirqs_on_caller+0x6a/0x220
[  845.502627][ T7302]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  845.558819][ T7302]  ? retint_kernel+0x2d/0x2d
[  845.563447][ T7302]  ? do_recvmmsg+0x24f/0x7a0
[  845.568074][ T7302]  do_recvmmsg+0x593/0x7a0
[  845.572526][ T7302]  ? ___sys_recvmsg+0x5a0/0x5a0
[  845.577415][ T7302]  ? kasan_check_write+0x14/0x20
[  845.582381][ T7302]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  845.587973][ T7302]  ? trace_hardirqs_on_caller+0x6a/0x220
[  845.593728][ T7302]  __sys_recvmmsg+0x259/0x270
[  845.598439][ T7302]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  845.603508][ T7302]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  845.609778][ T7302]  ? __ia32_compat_sys_recvmmsg_time32+0x1/0x150
[  845.616143][ T7302]  do_fast_syscall_32+0x281/0xc98
[  845.621229][ T7302]  entry_SYSENTER_compat+0x70/0x7f
[  845.626379][ T7302] RIP: 0023:0xf7efe869
[  845.630471][ T7302] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  845.650087][ T7302] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  845.658542][ T7302] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  845.666534][ T7302] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  845.674533][ T7302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  845.682522][ T7302] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  845.690512][ T7302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
03:03:23 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x80000)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="bb67b9e2c31b70f80801dc5cede5086fff8ec1370cfff79b8efbe848ba3edddc584fe73d2667dacf7e5470941299f797a29137a1530820757c03eb33b53c831496227fc22dfb5f66866ed5ad86eb26f1760c5d423c2462d9b67281368831d7c52fa1afdf7815fd48ceec70ac27c47b574558018efb8660b917ccc308bb3bd1132a8e412123e92c932d5cea53645a535df1209af48104207e0d83b8862e70c92efeadecda064e8354")
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x8dffffff}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x901208, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  845.731094][ T5064] binder: undelivered transaction 3114, process died.
03:03:23 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x3, "4226ef8e7770586e8a2e61ea4aaee829220d4b7dea68d0c06a6b855b990ec0c7", 0x0, 0x80, 0x7fffffff, 0x800, 0x6, 0x2, 0x1f, 0x2})

[  845.795383][ T7416] binder: 7415:7416 unknown command 536871040
[  845.823899][ T7416] binder: 7415:7416 ioctl c0306201 20000440 returned -22
03:03:23 executing program 5 (fault-call:7 fault-nth:2):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  845.842334][ T7416] binder: 7415:7416 ioctl c0306201 200002c0 returned -14
[  845.857382][ T7447] binder_alloc: binder_alloc_mmap_handler: 7415 20001000-20004000 already mapped failed -16
[  845.869390][ T7416] binder: BINDER_SET_CONTEXT_MGR already set
[  845.878514][ T7447] binder: 7415:7447 unknown command 536871040
[  845.890573][ T7416] binder: 7415:7416 ioctl 40046207 0 returned -16
[  845.897697][ T7447] binder: 7415:7447 ioctl c0306201 20000440 returned -22
03:03:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x2, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:23 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xf7df, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x5, 0x6, 0x3f, 0x3, 0x10001})
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), 0x4)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  845.955138][ T7531] binder_alloc: 7415: binder_alloc_buf, no vma
[  845.956552][ T5064] binder: unexpected work type, 4, not freed
[  845.967662][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  845.968608][ T7531] binder: 7415:7531 transaction failed 29189/-3, size 24-8 line 3147
[  845.995148][ T5064] binder: undelivered transaction 3118, process died.
[  846.094053][ T7531] binder: 7415:7531 ioctl c0306201 200002c0 returned -14
[  846.102869][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
[  846.124679][ T7628] FAULT_INJECTION: forcing a failure.
[  846.124679][ T7628] name failslab, interval 1, probability 0, space 0, times 0
[  846.144024][ T7628] CPU: 1 PID: 7628 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  846.151983][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  846.151991][ T7628] Call Trace:
[  846.152021][ T7628]  dump_stack+0x172/0x1f0
[  846.152044][ T7628]  should_fail.cold+0xa/0x15
[  846.152065][ T7628]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  846.152101][ T7628]  ? ___might_sleep+0x163/0x280
[  846.185417][ T7628]  __should_failslab+0x121/0x190
[  846.190390][ T7628]  should_failslab+0x9/0x14
[  846.194929][ T7628]  __kmalloc+0x2dc/0x740
[  846.199209][ T7628]  ? af_alg_release+0xc0/0xc0
[  846.203958][ T7628]  ? kasan_check_write+0x14/0x20
[  846.208924][ T7628]  ? sock_kmalloc+0xc6/0x120
[  846.213535][ T7628]  sock_kmalloc+0xc6/0x120
[  846.213560][ T7628]  af_alg_alloc_areq+0x24/0x1e0
[  846.213578][ T7628]  aead_recvmsg+0x45d/0x1ab0
[  846.213608][ T7628]  ? aead_release+0x50/0x50
[  846.232102][ T7628]  ? apparmor_socket_recvmsg+0x2a/0x30
[  846.237590][ T7628]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  846.243857][ T7628]  ? security_socket_recvmsg+0x9b/0xd0
[  846.249348][ T7628]  ? aead_release+0x50/0x50
[  846.253882][ T7628]  sock_recvmsg+0xd0/0x110
[  846.258329][ T7628]  ? __sock_recv_ts_and_drops+0x590/0x590
[  846.264087][ T7628]  ___sys_recvmsg+0x273/0x5a0
[  846.268826][ T7628]  ? ___sys_sendmsg+0x930/0x930
[  846.273705][ T7628]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  846.279980][ T7628]  ? kasan_check_read+0x11/0x20
[  846.284863][ T7628]  ? __fget+0x381/0x550
[  846.289090][ T7628]  ? ksys_dup3+0x3e0/0x3e0
[  846.293540][ T7628]  ? __fget_light+0x1a9/0x230
[  846.298354][ T7628]  ? __fdget+0x1b/0x20
[  846.298371][ T7628]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  846.298393][ T7628]  do_recvmmsg+0x593/0x7a0
[  846.298416][ T7628]  ? ___sys_recvmsg+0x5a0/0x5a0
[  846.318142][ T7628]  ? kasan_check_write+0x14/0x20
[  846.318168][ T7628]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  846.328692][ T7628]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  846.334974][ T7628]  __sys_recvmmsg+0x259/0x270
[  846.339689][ T7628]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  846.344766][ T7628]  ? __ia32_sys_read+0xb0/0xb0
[  846.349577][ T7628]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  846.355097][ T7628]  ? do_fast_syscall_32+0xd1/0xc98
[  846.360232][ T7628]  ? entry_SYSENTER_compat+0x70/0x7f
[  846.365557][ T7628]  ? do_fast_syscall_32+0xd1/0xc98
[  846.370707][ T7628]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  846.376983][ T7628]  do_fast_syscall_32+0x281/0xc98
[  846.382048][ T7628]  entry_SYSENTER_compat+0x70/0x7f
[  846.387183][ T7628] RIP: 0023:0xf7efe869
[  846.391291][ T7628] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  846.410916][ T7628] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  846.419353][ T7628] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  846.427350][ T7628] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  846.435347][ T7628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
03:03:24 executing program 1:
timer_create(0x5, &(0x7f0000000000)={0x0, 0x38, 0x1}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x3, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000100)={{r1, r2+10000000}, {r3, r4+30000000}}, &(0x7f0000000140))
r5 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x71f, 0x600)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000240)=0x8)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r6 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x55d4, 0x0)
listen(r6, 0x1)
ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f00000001c0)=0x1)

03:03:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xe0c009, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  846.443343][ T7628] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  846.451333][ T7628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  846.499231][    C0] net_ratelimit: 22 callbacks suppressed
[  846.499249][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  846.510794][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  846.516756][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  846.522634][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  846.536159][ T7747] binder: 7746:7747 unknown command 536871040
03:03:24 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x8, 0x8001, 0x5, 0x7fffffff, 0x0, 0x4, 0x10226, 0x6, 0xfffffffffffff2a4, 0x2, 0x10000, 0x6, 0x5, 0x1fa, 0x9f26, 0x9, 0xffff, 0x1, 0x7713, 0x5, 0x3, 0x0, 0x200, 0xfffffffeffffffff, 0x3, 0x1, 0x80, 0x100, 0x1, 0x2, 0x1, 0xff, 0x80000001, 0xff, 0x1, 0x4, 0x0, 0x6, 0x2, @perf_config_ext={0x5}, 0x0, 0x4, 0x3f, 0x7, 0x7fff, 0x6, 0xfff}, r0, 0x5, r0, 0x8)

03:03:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x3, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  846.556668][ T7747] binder: 7746:7747 ioctl c0306201 20000440 returned -22
[  846.580612][ T7747] binder: 7746:7747 ioctl c0306201 200002c0 returned -14
[  846.612464][ T7790] binder_alloc: binder_alloc_mmap_handler: 7746 20001000-20004000 already mapped failed -16
[  846.632447][ T7747] binder: BINDER_SET_CONTEXT_MGR already set
[  846.638782][ T7790] binder: 7746:7790 unknown command 536871040
[  846.645926][ T7747] binder: 7746:7747 ioctl 40046207 0 returned -16
[  846.652769][ T7790] binder: 7746:7790 ioctl c0306201 20000440 returned -22
03:03:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf0ffffff}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:24 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200480)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x9, 0x7, 0x8, 0x100000000, 0x6, 0x6, 0xffffffffffffff81, 0x20]})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x270, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xec}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2e8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2022}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

[  846.662270][ T7747] binder_alloc: 7746: binder_alloc_buf, no vma
[  846.687313][ T5064] binder: unexpected work type, 4, not freed
[  846.694210][ T7747] binder: 7746:7747 transaction failed 29189/-3, size 24-8 line 3147
03:03:24 executing program 5 (fault-call:7 fault-nth:3):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  846.715266][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  846.733434][ T5064] binder: undelivered transaction 3123, process died.
[  846.754594][ T7747] binder: 7746:7747 ioctl c0306201 200002c0 returned -14
03:03:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x4, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  846.804547][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x1000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:24 executing program 1:
clock_nanosleep(0xfffffffffffffffe, 0x10117bf18f77b7f2, 0x0, 0x0)
r0 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000100)={0x5e, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x2, 'lblcr\x00', 0x27, 0x7, 0x7}, 0x2c)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/111, 0x200000, 0x1000, 0x3}, 0x18)

[  846.929911][ T8118] binder: 8117:8118 unknown command 536871040
03:03:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r1=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  846.998250][ T8145] binder: 8117:8145 ioctl c0306201 200002c0 returned -14
[  846.998288][ T8118] binder: 8117:8118 ioctl c0306201 20000440 returned -22
[  847.044079][ T8147] FAULT_INJECTION: forcing a failure.
[  847.044079][ T8147] name failslab, interval 1, probability 0, space 0, times 0
[  847.077778][ T8147] CPU: 0 PID: 8147 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  847.085723][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  847.095806][ T8147] Call Trace:
[  847.099138][ T8147]  dump_stack+0x172/0x1f0
[  847.103504][ T8147]  should_fail.cold+0xa/0x15
[  847.108128][ T8147]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  847.113979][ T8147]  ? ___might_sleep+0x163/0x280
[  847.118866][ T8147]  __should_failslab+0x121/0x190
[  847.123842][ T8147]  should_failslab+0x9/0x14
[  847.128378][ T8147]  __kmalloc+0x2dc/0x740
[  847.132679][ T8147]  ? af_alg_release+0xc0/0xc0
[  847.137394][ T8147]  ? kasan_check_write+0x14/0x20
[  847.142461][ T8147]  ? sock_kmalloc+0xc6/0x120
[  847.147109][ T8147]  sock_kmalloc+0xc6/0x120
[  847.151563][ T8147]  af_alg_alloc_areq+0x24/0x1e0
[  847.156447][ T8147]  aead_recvmsg+0x45d/0x1ab0
[  847.161088][ T8147]  ? aead_release+0x50/0x50
[  847.165622][ T8147]  ? apparmor_socket_recvmsg+0x2a/0x30
[  847.171110][ T8147]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  847.177385][ T8147]  ? security_socket_recvmsg+0x9b/0xd0
[  847.182880][ T8147]  ? aead_release+0x50/0x50
[  847.187420][ T8147]  sock_recvmsg+0xd0/0x110
[  847.191884][ T8147]  ? __sock_recv_ts_and_drops+0x590/0x590
[  847.197639][ T8147]  ___sys_recvmsg+0x273/0x5a0
[  847.202361][ T8147]  ? ___sys_sendmsg+0x930/0x930
[  847.207252][ T8147]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  847.213536][ T8147]  ? kasan_check_read+0x11/0x20
[  847.218422][ T8147]  ? lockdep_hardirqs_on+0x418/0x5d0
[  847.223745][ T8147]  ? retint_kernel+0x2d/0x2d
[  847.228393][ T8147]  ? trace_hardirqs_on_caller+0x6a/0x220
[  847.234072][ T8147]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  847.239567][ T8147]  ? retint_kernel+0x2d/0x2d
[  847.244209][ T8147]  do_recvmmsg+0x593/0x7a0
[  847.248678][ T8147]  ? ___sys_recvmsg+0x5a0/0x5a0
[  847.253571][ T8147]  ? kasan_check_write+0x14/0x20
[  847.258549][ T8147]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  847.264221][ T8147]  ? retint_kernel+0x2d/0x2d
[  847.268855][ T8147]  ? trace_hardirqs_on_caller+0x6a/0x220
[  847.274527][ T8147]  __sys_recvmmsg+0x259/0x270
[  847.275461][ T8145] binder: BINDER_SET_CONTEXT_MGR already set
[  847.279231][ T8147]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  847.279257][ T8147]  ? retint_kernel+0x2d/0x2d
[  847.279289][ T8147]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  847.279307][ T8147]  ? do_fast_syscall_32+0x106/0xc98
[  847.279323][ T8147]  do_fast_syscall_32+0x281/0xc98
[  847.279347][ T8147]  entry_SYSENTER_compat+0x70/0x7f
[  847.299727][ T8308] binder: 8117:8308 unknown command 536871040
[  847.301283][ T8147] RIP: 0023:0xf7efe869
[  847.306489][ T8308] binder: 8117:8308 ioctl c0306201 20000440 returned -22
03:03:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x7, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  847.311509][ T8147] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  847.311518][ T8147] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  847.311531][ T8147] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  847.311538][ T8147] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  847.311545][ T8147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  847.311552][ T8147] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  847.311559][ T8147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  847.390136][ T8145] binder: 8117:8145 ioctl 40046207 0 returned -16
03:03:25 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x400)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x6, 0x7, 0x1})
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x8000)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @dev}, &(0x7f0000000140)=0xc)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000100)={0x7ff, "1855e060b94a33feeb91462e16de7ee741b8e01479d4004b6eb2afb5c165cdb5", 0x1, 0x1})
ioctl$DRM_IOCTL_GET_STATS(r0, 0x807c6406, &(0x7f0000000180)=""/117)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000)

03:03:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xffffff8d}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  847.436481][ T5064] binder: unexpected work type, 4, not freed
[  847.457749][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x8, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x2000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  847.553081][ T7897] binder: undelivered transaction 3128, process died.
[  847.618252][ T8540] binder: 8533:8540 unknown command 536871040
[  847.631444][ T8540] binder: 8533:8540 ioctl c0306201 20000440 returned -22
[  847.657640][ T8540] binder: 8533:8540 ioctl c0306201 200002c0 returned -14
03:03:25 executing program 1:
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa)
prctl$PR_SET_UNALIGN(0x6, 0x3)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x2, r1})
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0xfffffffffffffff9, 0x1a})
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180)=0x101, 0x4)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000200)=0x44)
ptrace$peekuser(0x3, 0x0, 0x3f)

[  847.677510][ T8584] binder_alloc: binder_alloc_mmap_handler: 8533 20001000-20004000 already mapped failed -16
[  847.706121][ T8540] binder: BINDER_SET_CONTEXT_MGR already set
[  847.716661][ T8584] binder: 8533:8584 unknown command 536871040
[  847.726788][ T8540] binder: 8533:8540 ioctl 40046207 0 returned -16
[  847.750156][ T8584] binder: 8533:8584 ioctl c0306201 20000440 returned -22
[  847.769216][    C0] protocol 88fb is buggy, dev hsr_slave_0
03:03:25 executing program 5 (fault-call:7 fault-nth:4):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  847.775174][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  847.786594][ T8677] binder_alloc: 8533: binder_alloc_buf, no vma
[  847.787418][ T7897] binder: unexpected work type, 4, not freed
[  847.799577][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0xd, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  847.839466][ T8677] binder: 8533:8677 transaction failed 29189/-3, size 24-8 line 3147
[  847.848103][ T7897] binder: undelivered transaction 3132, process died.
[  847.855057][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  847.855114][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  847.855192][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  847.855231][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:25 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  847.901544][ T8691] FAULT_INJECTION: forcing a failure.
[  847.901544][ T8691] name failslab, interval 1, probability 0, space 0, times 0
[  847.913950][ T8677] binder: 8533:8677 ioctl c0306201 200002c0 returned -14
[  847.967999][ T8691] CPU: 0 PID: 8691 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  847.975947][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  847.986022][ T8691] Call Trace:
[  847.989337][ T8691]  dump_stack+0x172/0x1f0
[  847.993692][ T8691]  should_fail.cold+0xa/0x15
[  847.998310][ T8691]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  848.004145][ T8691]  ? ___might_sleep+0x163/0x280
[  848.009022][ T8691]  __should_failslab+0x121/0x190
[  848.013991][ T8691]  should_failslab+0x9/0x14
[  848.018514][ T8691]  __kmalloc+0x2dc/0x740
[  848.022169][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
[  848.022785][ T8691]  ? af_alg_release+0xc0/0xc0
[  848.033627][ T8691]  ? sock_kmalloc+0xc6/0x120
[  848.038256][ T8691]  sock_kmalloc+0xc6/0x120
[  848.042706][ T8691]  af_alg_alloc_areq+0x24/0x1e0
[  848.047622][ T8691]  aead_recvmsg+0x45d/0x1ab0
[  848.052733][ T8691]  ? aead_release+0x50/0x50
[  848.057791][ T8691]  ? apparmor_socket_recvmsg+0x2a/0x30
[  848.063293][ T8691]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.069556][ T8691]  ? security_socket_recvmsg+0x9b/0xd0
[  848.075045][ T8691]  ? aead_release+0x50/0x50
[  848.079580][ T8691]  sock_recvmsg+0xd0/0x110
[  848.084029][ T8691]  ? __sock_recv_ts_and_drops+0x590/0x590
[  848.089785][ T8691]  ___sys_recvmsg+0x273/0x5a0
[  848.094497][ T8691]  ? ___sys_sendmsg+0x930/0x930
[  848.099372][ T8691]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.105662][ T8691]  ? kasan_check_read+0x11/0x20
[  848.110567][ T8691]  ? __fget+0x381/0x550
[  848.114749][ T8691]  ? ksys_dup3+0x3e0/0x3e0
[  848.119188][ T8691]  ? __fget_light+0x16/0x230
[  848.123810][ T8691]  ? __fget_light+0x1a9/0x230
[  848.128517][ T8691]  ? __fdget+0x1b/0x20
[  848.132609][ T8691]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  848.138878][ T8691]  do_recvmmsg+0x593/0x7a0
[  848.143326][ T8691]  ? ___sys_recvmsg+0x5a0/0x5a0
[  848.148216][ T8691]  ? kasan_check_write+0x14/0x20
[  848.153199][ T8691]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  848.158785][ T8691]  ? retint_kernel+0x2d/0x2d
[  848.163401][ T8691]  ? trace_hardirqs_on_caller+0x6a/0x220
[  848.169072][ T8691]  __sys_recvmmsg+0x259/0x270
[  848.173782][ T8691]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  848.178836][ T8691]  ? retint_kernel+0x2d/0x2d
[  848.183470][ T8691]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  848.189851][ T8691]  ? do_fast_syscall_32+0x106/0xc98
[  848.195090][ T8691]  do_fast_syscall_32+0x281/0xc98
[  848.200149][ T8691]  entry_SYSENTER_compat+0x70/0x7f
[  848.205298][ T8691] RIP: 0023:0xf7efe869
[  848.209414][ T8691] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  848.229038][ T8691] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  848.237476][ T8691] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  848.245469][ T8691] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  848.253463][ T8691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  848.261454][ T8691] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
03:03:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x3000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:26 executing program 1:
clock_nanosleep(0x4, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0)

[  848.269445][ T8691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  848.331957][ T8816] binder: 8814:8816 unknown command 536871040
[  848.356797][ T8816] binder: 8814:8816 ioctl c0306201 20000440 returned -22
03:03:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xfffffff0}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  848.378368][ T8971] binder: 8814:8971 ioctl c0306201 200002c0 returned -14
03:03:26 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xa, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000040)={0x50000000, 0x7, 0x33})

03:03:26 executing program 5 (fault-call:7 fault-nth:5):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0xe, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  848.475666][ T8971] binder_alloc: binder_alloc_mmap_handler: 8814 20001000-20004000 already mapped failed -16
[  848.503394][ T8971] binder: BINDER_SET_CONTEXT_MGR already set
[  848.503423][ T9051] binder: 8814:9051 unknown command 536871040
03:03:26 executing program 1:
r0 = dup(0xffffffffffffff9c)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xefd, 0x10, 0x1})
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x101)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  848.562554][ T7897] binder: unexpected work type, 4, not freed
[  848.573758][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  848.581877][ T9112] FAULT_INJECTION: forcing a failure.
[  848.581877][ T9112] name failslab, interval 1, probability 0, space 0, times 0
[  848.585962][ T9051] binder: 8814:9051 ioctl c0306201 20000440 returned -22
[  848.596694][ T8971] binder: 8814:8971 ioctl 40046207 0 returned -16
[  848.641961][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  848.649905][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  848.659982][ T9112] Call Trace:
[  848.663310][ T9112]  dump_stack+0x172/0x1f0
[  848.667684][ T9112]  should_fail.cold+0xa/0x15
[  848.672314][ T9112]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  848.678158][ T9112]  ? ___might_sleep+0x163/0x280
[  848.683048][ T9112]  __should_failslab+0x121/0x190
[  848.688023][ T9112]  should_failslab+0x9/0x14
[  848.692557][ T9112]  __kmalloc+0x2dc/0x740
[  848.696833][ T9112]  ? af_alg_release+0xc0/0xc0
[  848.701540][ T9112]  ? kasan_check_write+0x14/0x20
[  848.706528][ T9112]  ? sock_kmalloc+0xc6/0x120
[  848.711148][ T9112]  sock_kmalloc+0xc6/0x120
[  848.715597][ T9112]  af_alg_alloc_areq+0x24/0x1e0
[  848.720479][ T9112]  aead_recvmsg+0x45d/0x1ab0
[  848.725118][ T9112]  ? aead_release+0x50/0x50
[  848.729657][ T9112]  ? apparmor_socket_recvmsg+0x2a/0x30
[  848.735153][ T9112]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.741425][ T9112]  ? security_socket_recvmsg+0x9b/0xd0
[  848.746918][ T9112]  ? aead_release+0x50/0x50
[  848.751456][ T9112]  sock_recvmsg+0xd0/0x110
[  848.756010][ T9112]  ? __sock_recv_ts_and_drops+0x590/0x590
[  848.764018][ T9112]  ___sys_recvmsg+0x273/0x5a0
[  848.768733][ T9112]  ? ___sys_sendmsg+0x930/0x930
[  848.773617][ T9112]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  848.779889][ T9112]  ? kasan_check_read+0x11/0x20
[  848.784810][ T9112]  ? __fget+0x381/0x550
[  848.789001][ T9112]  ? ksys_dup3+0x3e0/0x3e0
[  848.793454][ T9112]  ? __fget_light+0x1a9/0x230
[  848.798162][ T9112]  ? __fdget+0x1b/0x20
[  848.802268][ T9112]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  848.808545][ T9112]  do_recvmmsg+0x593/0x7a0
[  848.813002][ T9112]  ? ___sys_recvmsg+0x5a0/0x5a0
[  848.817893][ T9112]  ? kasan_check_write+0x14/0x20
[  848.822872][ T9112]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  848.828461][ T9112]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  848.834741][ T9112]  __sys_recvmmsg+0x259/0x270
[  848.839676][ T9112]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  848.844729][ T9112]  ? __ia32_sys_read+0xb0/0xb0
[  848.849527][ T9112]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  848.855050][ T9112]  ? do_fast_syscall_32+0xd1/0xc98
[  848.860197][ T9112]  ? entry_SYSENTER_compat+0x70/0x7f
[  848.865523][ T9112]  ? do_fast_syscall_32+0xd1/0xc98
[  848.870677][ T9112]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  848.876951][ T9112]  do_fast_syscall_32+0x281/0xc98
[  848.882010][ T9112]  entry_SYSENTER_compat+0x70/0x7f
[  848.887141][ T9112] RIP: 0023:0xf7efe869
[  848.891234][ T9112] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  848.910867][ T9112] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  848.919300][ T9112] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  848.927322][ T9112] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  848.935315][ T9112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
03:03:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2000000000002, 0x100001, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  848.943331][ T9112] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  848.951321][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
03:03:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x200000000000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  849.025479][ T7897] binder: undelivered transaction 3137, process died.
03:03:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0xf, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:27 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x2}}, 0x10)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x0, @time={r1, r2+10000000}, 0x6, {0x6}, 0x4, 0x1, 0x3})
timer_create(0x6, &(0x7f0000000080)={0x0, 0x3d}, &(0x7f00000000c0)=<r3=>0x0)
timer_gettime(r3, &(0x7f0000000140))

[  849.220126][ T9398] binder: 9383:9398 unknown command 536871040
[  849.256020][ T9398] binder: 9383:9398 ioctl c0306201 20000440 returned -22
03:03:27 executing program 5 (fault-call:7 fault-nth:6):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x10, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  849.280767][ T9526] binder: 9383:9526 ioctl c0306201 200002c0 returned -14
[  849.327910][ T9526] binder_alloc: binder_alloc_mmap_handler: 9383 20001000-20004000 already mapped failed -16
03:03:27 executing program 1:
clock_nanosleep(0x4, 0x100000010, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0x80000001}, 0x80)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
mkdir(&(0x7f0000000140)='./file0\x00', 0x102)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[])
r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000)
r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20000)
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000180)=""/7)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='vmnet1security@systemem1:\x00', r4}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4)
rmdir(&(0x7f0000001540)='./file0/file0\x00')
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000004c0)={<r6=>0x0, 0xc9, 0x7}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000580)={r6, 0x3}, &(0x7f00000005c0)=0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ppoll(&(0x7f00000001c0)=[{}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, <r8=>0x0})
ptrace$pokeuser(0x6, r8, 0xa6d, 0x3)
pipe(&(0x7f0000000000))

[  849.397808][ T9398] binder: BINDER_SET_CONTEXT_MGR already set
[  849.430769][ T9594] FAULT_INJECTION: forcing a failure.
[  849.430769][ T9594] name failslab, interval 1, probability 0, space 0, times 0
[  849.460158][ T9398] binder: 9383:9398 ioctl 40046207 0 returned -16
[  849.462276][ T9652] binder: 9383:9652 unknown command 536871040
[  849.492313][ T9594] CPU: 1 PID: 9594 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  849.500270][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  849.510379][ T9594] Call Trace:
[  849.513707][ T9594]  dump_stack+0x172/0x1f0
[  849.518080][ T9594]  should_fail.cold+0xa/0x15
[  849.520063][ T5064] binder: unexpected work type, 4, not freed
[  849.522705][ T9594]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  849.528682][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  849.534508][ T9594]  ? ___might_sleep+0x163/0x280
[  849.534528][ T9594]  __should_failslab+0x121/0x190
[  849.534546][ T9594]  should_failslab+0x9/0x14
[  849.534560][ T9594]  __kmalloc+0x2dc/0x740
[  849.534579][ T9594]  ? af_alg_release+0xc0/0xc0
[  849.534603][ T9594]  ? sock_kmalloc+0xc6/0x120
[  849.568339][ T9594]  sock_kmalloc+0xc6/0x120
[  849.572803][ T9594]  af_alg_alloc_areq+0x24/0x1e0
[  849.577694][ T9594]  aead_recvmsg+0x45d/0x1ab0
[  849.582340][ T9594]  ? aead_release+0x50/0x50
[  849.586875][ T9594]  ? apparmor_socket_recvmsg+0x2a/0x30
[  849.592367][ T9594]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  849.598658][ T9594]  ? security_socket_recvmsg+0x9b/0xd0
[  849.604154][ T9594]  ? aead_release+0x50/0x50
[  849.608693][ T9594]  sock_recvmsg+0xd0/0x110
[  849.609325][ T5064] binder: undelivered transaction 3141, process died.
[  849.613144][ T9594]  ? __sock_recv_ts_and_drops+0x590/0x590
[  849.625650][ T9594]  ___sys_recvmsg+0x273/0x5a0
[  849.630392][ T9594]  ? ___sys_sendmsg+0x930/0x930
[  849.635285][ T9594]  ? __schedule+0x81f/0x1cc0
[  849.639916][ T9594]  ? kasan_check_read+0x11/0x20
[  849.644928][ T9594]  ? lockdep_hardirqs_on+0x418/0x5d0
[  849.650255][ T9594]  ? retint_kernel+0x2d/0x2d
[  849.654899][ T9594]  ? trace_hardirqs_on_caller+0x6a/0x220
[  849.660575][ T9594]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  849.666078][ T9594]  ? retint_kernel+0x2d/0x2d
[  849.670722][ T9594]  do_recvmmsg+0x593/0x7a0
[  849.675187][ T9594]  ? ___sys_recvmsg+0x5a0/0x5a0
[  849.680082][ T9594]  ? kasan_check_write+0x14/0x20
[  849.685144][ T9594]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  849.690732][ T9594]  ? trace_hardirqs_on_caller+0x6a/0x220
[  849.696417][ T9594]  __sys_recvmmsg+0x259/0x270
[  849.701136][ T9594]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  849.706229][ T9594]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  849.712518][ T9594]  ? __ia32_compat_sys_recvmmsg_time32+0x1/0x150
[  849.718887][ T9594]  do_fast_syscall_32+0x281/0xc98
[  849.723957][ T9594]  entry_SYSENTER_compat+0x70/0x7f
[  849.729101][ T9594] RIP: 0023:0xf7efe869
[  849.733195][ T9594] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  849.754650][ T9594] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  849.763088][ T9594] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  849.771090][ T9594] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  849.779085][ T9594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  849.787079][ T9594] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  849.795073][ T9594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
03:03:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x15, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  849.850679][ T9652] binder: 9383:9652 ioctl c0306201 20000440 returned -22
03:03:27 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0)
r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0, &(0x7f00000001c0))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={<r7=>0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000440)='/dev/snapshot\x00'}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={<r8=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000640)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x2, "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", 0xe3, 0x8000, 0x4, 0x3d4d, 0x7fffffff, 0xfffffffffffffffc, 0x1, 0x1}, r8}}, 0x128)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={<r9=>0x0}, &(0x7f0000000500)=0xc)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x401, r3, r4, r5, r6, 0x100, 0x155141ef}, 0xffffffffffffffff, 0x6821ee63, 0x0, 0x400, r7, r9, 0x1f})
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ftruncate(r0, 0x6)

03:03:27 executing program 5 (fault-call:7 fault-nth:7):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x5000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:27 executing program 1:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$RTC_PLL_GET(r0, 0x801c7011, &(0x7f0000000040))
clock_nanosleep(0x20d, 0x1, 0x0, 0x0)

03:03:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf00000000000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  850.090912][ T9933] binder: 9932:9933 unknown command 536871040
03:03:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x17, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  850.138949][ T9933] binder: 9932:9933 ioctl c0306201 20000440 returned -22
[  850.172921][ T9978] binder: 9932:9978 ioctl c0306201 200002c0 returned -14
03:03:28 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000340)=""/54)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9c, 0x2)

[  850.187257][ T9981] FAULT_INJECTION: forcing a failure.
[  850.187257][ T9981] name failslab, interval 1, probability 0, space 0, times 0
[  850.236593][ T9978] binder_alloc: binder_alloc_mmap_handler: 9932 20001000-20004000 already mapped failed -16
[  850.266418][ T9981] CPU: 1 PID: 9981 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  850.274373][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  850.284538][ T9981] Call Trace:
[  850.285685][ T9933] binder: 9932:9933 unknown command 536871040
[  850.287852][ T9981]  dump_stack+0x172/0x1f0
[  850.287879][ T9981]  should_fail.cold+0xa/0x15
[  850.287904][ T9981]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  850.308746][ T9981]  ? ___might_sleep+0x163/0x280
[  850.313641][ T9981]  __should_failslab+0x121/0x190
[  850.318616][ T9981]  should_failslab+0x9/0x14
[  850.323152][ T9981]  __kmalloc+0x2dc/0x740
[  850.325918][T10083] binder: BINDER_SET_CONTEXT_MGR already set
[  850.327450][ T9981]  ? af_alg_release+0xc0/0xc0
[  850.327469][ T9981]  ? kasan_check_write+0x14/0x20
[  850.327495][ T9981]  ? sock_kmalloc+0xc6/0x120
[  850.347716][ T9981]  sock_kmalloc+0xc6/0x120
[  850.352175][ T9981]  af_alg_alloc_areq+0x24/0x1e0
[  850.357067][ T9981]  aead_recvmsg+0x45d/0x1ab0
[  850.360904][ T9933] binder: 9932:9933 ioctl c0306201 20000440 returned -22
[  850.361700][ T9981]  ? aead_release+0x50/0x50
[  850.361726][ T9981]  ? apparmor_socket_recvmsg+0x2a/0x30
[  850.372935][ T5064] binder: unexpected work type, 4, not freed
[  850.373299][ T9981]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  850.379623][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  850.384776][ T9981]  ? security_socket_recvmsg+0x9b/0xd0
[  850.384795][ T9981]  ? aead_release+0x50/0x50
[  850.384815][ T9981]  sock_recvmsg+0xd0/0x110
[  850.384830][ T9981]  ? __sock_recv_ts_and_drops+0x590/0x590
[  850.384853][ T9981]  ___sys_recvmsg+0x273/0x5a0
[  850.393800][T10083] binder: 9932:10083 ioctl 40046207 0 returned -16
[  850.396938][ T9981]  ? ___sys_sendmsg+0x930/0x930
[  850.396956][ T9981]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  850.396982][ T9981]  ? kasan_check_read+0x11/0x20
[  850.435757][ T5064] binder: undelivered transaction 3145, process died.
[  850.440221][ T9981]  ? __fget+0x381/0x550
[  850.440253][ T9981]  ? ksys_dup3+0x3e0/0x3e0
[  850.440277][ T9981]  ? __fget_light+0x1a9/0x230
[  850.440292][ T9981]  ? __fdget+0x1b/0x20
[  850.440307][ T9981]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  850.440329][ T9981]  do_recvmmsg+0x593/0x7a0
[  850.440351][ T9981]  ? ___sys_recvmsg+0x5a0/0x5a0
[  850.484865][ T9981]  ? kasan_check_write+0x14/0x20
[  850.489856][ T9981]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  850.495447][ T9981]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  850.501733][ T9981]  __sys_recvmmsg+0x259/0x270
[  850.506451][ T9981]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  850.511511][ T9981]  ? __ia32_sys_read+0xb0/0xb0
[  850.516306][ T9981]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  850.521810][ T9981]  ? do_fast_syscall_32+0xd1/0xc98
[  850.526950][ T9981]  ? entry_SYSENTER_compat+0x70/0x7f
[  850.532274][ T9981]  ? do_fast_syscall_32+0xd1/0xc98
[  850.537429][ T9981]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  850.543707][ T9981]  do_fast_syscall_32+0x281/0xc98
[  850.548809][ T9981]  entry_SYSENTER_compat+0x70/0x7f
[  850.553944][ T9981] RIP: 0023:0xf7efe869
[  850.558036][ T9981] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  850.577667][ T9981] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
03:03:28 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})

03:03:28 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
ioperm(0x100000001, 0x4, 0x5)

03:03:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:28 executing program 1:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x84801, 0x40)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300))
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x840, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x917}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other='allow_other'}], [{@fowner_lt={'fowner<', r3}}]}})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  850.586112][ T9981] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  850.594112][ T9981] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  850.602111][ T9981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  850.610103][ T9981] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  850.618181][ T9981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
03:03:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x18, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  850.710058][T10257] binder: 10244:10257 unknown command 536871040
[  850.716868][T10257] binder: 10244:10257 ioctl c0306201 20000440 returned -22
[  850.749598][T10257] binder: 10244:10257 ioctl c0306201 200002c0 returned -14
[  850.782310][T10326] binder_alloc: binder_alloc_mmap_handler: 10244 20001000-20004000 already mapped failed -16
[  850.796898][T10257] binder: BINDER_SET_CONTEXT_MGR already set
[  850.804330][T10326] binder: 10244:10326 unknown command 536871040
[  850.811507][T10257] binder: 10244:10257 ioctl 40046207 0 returned -16
[  850.818842][T10326] binder: 10244:10326 ioctl c0306201 20000440 returned -22
[  850.831452][T10257] binder_alloc: 10244: binder_alloc_buf, no vma
03:03:28 executing program 5 (fault-call:7 fault-nth:8):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  850.867779][ T7897] binder: unexpected work type, 4, not freed
[  850.881569][T10257] binder: 10244:10257 transaction failed 29189/-3, size 24-8 line 3147
[  850.892653][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  850.907385][T10257] binder: 10244:10257 ioctl c0306201 200002c0 returned -14
03:03:28 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$TIOCNOTTY(r0, 0x5422)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
clock_nanosleep(0x7, 0x1, &(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0))

03:03:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x5a03000000000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  850.927819][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
[  850.962135][ T7897] binder: undelivered transaction 3149, process died.
03:03:28 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  851.075104][T10485] FAULT_INJECTION: forcing a failure.
[  851.075104][T10485] name failslab, interval 1, probability 0, space 0, times 0
[  851.110931][T10510] binder: 10509:10510 unknown command 536871040
[  851.130569][T10485] CPU: 0 PID: 10485 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  851.138598][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  851.148702][T10485] Call Trace:
[  851.152029][T10485]  dump_stack+0x172/0x1f0
[  851.156392][T10485]  should_fail.cold+0xa/0x15
[  851.161011][T10485]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  851.161135][T10510] binder: 10509:10510 ioctl c0306201 20000440 returned -22
[  851.166934][T10485]  ? ___might_sleep+0x163/0x280
[  851.166954][T10485]  __should_failslab+0x121/0x190
[  851.166977][T10485]  should_failslab+0x9/0x14
[  851.188569][T10485]  __kmalloc+0x2dc/0x740
[  851.192845][T10485]  ? af_alg_release+0xc0/0xc0
[  851.197559][T10485]  ? kasan_check_write+0x14/0x20
[  851.202525][T10485]  ? sock_kmalloc+0xc6/0x120
[  851.207142][T10485]  sock_kmalloc+0xc6/0x120
[  851.211593][T10485]  af_alg_alloc_areq+0x24/0x1e0
[  851.216477][T10485]  aead_recvmsg+0x45d/0x1ab0
[  851.221126][T10485]  ? aead_release+0x50/0x50
[  851.225683][T10485]  ? apparmor_socket_recvmsg+0x2a/0x30
[  851.231169][T10485]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  851.237455][T10485]  ? security_socket_recvmsg+0x9b/0xd0
[  851.242946][T10485]  ? aead_release+0x50/0x50
[  851.247479][T10485]  sock_recvmsg+0xd0/0x110
[  851.251942][T10485]  ? __sock_recv_ts_and_drops+0x590/0x590
[  851.257701][T10485]  ___sys_recvmsg+0x273/0x5a0
[  851.262425][T10485]  ? ___sys_sendmsg+0x930/0x930
[  851.267320][T10485]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  851.273728][T10485]  ? kasan_check_read+0x11/0x20
[  851.278612][T10485]  ? __fget+0x381/0x550
[  851.282804][T10485]  ? ksys_dup3+0x3e0/0x3e0
[  851.287275][T10485]  ? __fget_light+0x1a9/0x230
[  851.291992][T10485]  ? __fdget+0x1b/0x20
[  851.296099][T10485]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  851.302377][T10485]  do_recvmmsg+0x593/0x7a0
[  851.306843][T10485]  ? ___sys_recvmsg+0x5a0/0x5a0
[  851.311745][T10485]  ? _raw_spin_unlock_irq+0x5e/0x90
[  851.316977][T10485]  ? finish_task_switch+0x146/0x780
[  851.322203][T10485]  ? finish_task_switch+0x118/0x780
[  851.327439][T10485]  ? __switch_to_asm+0x34/0x70
[  851.332226][T10485]  ? __switch_to_asm+0x40/0x70
[  851.337225][T10485]  ? __schedule+0x81f/0x1cc0
[  851.341868][T10485]  ? retint_kernel+0x2d/0x2d
[  851.346587][T10485]  ? trace_hardirqs_on_caller+0x6a/0x220
[  851.352271][T10485]  __sys_recvmmsg+0x259/0x270
[  851.356982][T10485]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  851.362046][T10485]  ? retint_kernel+0x2d/0x2d
[  851.362838][T10512] binder: 10509:10512 ioctl c0306201 200002c0 returned -14
[  851.366758][T10485]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  851.366780][T10485]  ? do_fast_syscall_32+0x27c/0xc98
[  851.366804][T10485]  do_fast_syscall_32+0x281/0xc98
[  851.390573][T10485]  entry_SYSENTER_compat+0x70/0x7f
[  851.395706][T10485] RIP: 0023:0xf7efe869
[  851.399797][T10485] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  851.407557][T10510] binder_alloc: binder_alloc_mmap_handler: 10509 20001000-20004000 already mapped failed -16
03:03:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x19, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  851.419416][T10485] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  851.419431][T10485] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  851.419438][T10485] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  851.419445][T10485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  851.419452][T10485] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  851.419460][T10485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  851.497600][T10517] binder: 10509:10517 unknown command 536871040
[  851.515256][T10517] binder: 10509:10517 ioctl c0306201 20000440 returned -22
[  851.522361][T10512] binder: BINDER_SET_CONTEXT_MGR already set
03:03:29 executing program 5 (fault-call:7 fault-nth:9):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  851.553495][ T5064] binder: unexpected work type, 4, not freed
[  851.559905][T10510] binder_alloc: 10509: binder_alloc_buf, no vma
[  851.571712][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  851.587040][T10512] binder: 10509:10512 ioctl 40046207 0 returned -16
03:03:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0x8dffffff00000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x1a, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  851.605248][ T5064] binder: undelivered transaction 3154, process died.
[  851.624741][T10510] binder: 10509:10510 transaction failed 29189/-3, size 24-8 line 3147
[  851.663747][T10510] binder: 10509:10510 ioctl c0306201 200002c0 returned -14
[  851.674980][T10627] FAULT_INJECTION: forcing a failure.
[  851.674980][T10627] name failslab, interval 1, probability 0, space 0, times 0
[  851.699436][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
[  851.726060][T10627] CPU: 0 PID: 10627 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #41
[  851.734094][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  851.747671][T10627] Call Trace:
[  851.750997][T10627]  dump_stack+0x172/0x1f0
[  851.755363][T10627]  should_fail.cold+0xa/0x15
[  851.759993][T10627]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  851.765840][T10627]  ? ___might_sleep+0x163/0x280
[  851.770811][T10627]  __should_failslab+0x121/0x190
[  851.775781][T10627]  should_failslab+0x9/0x14
[  851.780326][T10627]  __kmalloc+0x2dc/0x740
[  851.784599][T10627]  ? af_alg_release+0xc0/0xc0
[  851.789316][T10627]  ? kasan_check_write+0x14/0x20
[  851.794288][T10627]  ? sock_kmalloc+0xc6/0x120
[  851.798906][T10627]  sock_kmalloc+0xc6/0x120
[  851.803342][T10627]  af_alg_alloc_areq+0x24/0x1e0
[  851.808216][T10627]  aead_recvmsg+0x45d/0x1ab0
[  851.812863][T10627]  ? aead_release+0x50/0x50
[  851.817396][T10627]  ? apparmor_socket_recvmsg+0x2a/0x30
[  851.823007][T10627]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  851.829296][T10627]  ? security_socket_recvmsg+0x9b/0xd0
[  851.834787][T10627]  ? aead_release+0x50/0x50
[  851.839553][T10627]  sock_recvmsg+0xd0/0x110
[  851.844002][T10627]  ? __sock_recv_ts_and_drops+0x590/0x590
[  851.849753][T10627]  ___sys_recvmsg+0x273/0x5a0
[  851.854471][T10627]  ? ___sys_sendmsg+0x930/0x930
[  851.859352][T10627]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  851.865631][T10627]  ? kasan_check_read+0x11/0x20
[  851.870524][T10627]  ? __fget+0x381/0x550
[  851.876618][T10627]  ? ksys_dup3+0x3e0/0x3e0
[  851.881059][T10627]  ? __fget_light+0x1a9/0x230
[  851.885767][T10627]  ? __fdget+0x1b/0x20
[  851.889882][T10627]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  851.896161][T10627]  do_recvmmsg+0x593/0x7a0
[  851.900612][T10627]  ? ___sys_recvmsg+0x5a0/0x5a0
[  851.905503][T10627]  ? kasan_check_write+0x14/0x20
[  851.910476][T10627]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  851.916067][T10627]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  851.922347][T10627]  __sys_recvmmsg+0x259/0x270
[  851.927057][T10627]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  851.932110][T10627]  ? __ia32_sys_read+0xb0/0xb0
[  851.936909][T10627]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  851.942400][T10627]  ? do_fast_syscall_32+0xd1/0xc98
[  851.947539][T10627]  ? entry_SYSENTER_compat+0x70/0x7f
[  851.952856][T10627]  ? do_fast_syscall_32+0xd1/0xc98
[  851.958001][T10627]  __ia32_compat_sys_recvmmsg_time32+0xc6/0x150
[  851.964295][T10627]  do_fast_syscall_32+0x281/0xc98
[  851.969352][T10627]  entry_SYSENTER_compat+0x70/0x7f
[  851.974485][T10627] RIP: 0023:0xf7efe869
[  851.978575][T10627] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  851.998204][T10627] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  852.006657][T10627] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020006880
[  852.009629][    C1] net_ratelimit: 18 callbacks suppressed
[  852.009669][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  852.014650][T10627] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  852.014660][T10627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  852.014667][T10627] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  852.014674][T10627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  852.017485][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  852.021019][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  852.027175][    C0] protocol 88fb is buggy, dev hsr_slave_1
03:03:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:29 executing program 1:
clock_nanosleep(0x2, 0xfffffffffffffffe, 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x400000)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x5}, 0x1c)
bind$isdn_base(r0, &(0x7f00000000c0)={0x22, 0x7f, 0x10000, 0x7, 0x1f}, 0x6)
write$FUSE_STATFS(r0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x100000007, {{0x8, 0x20, 0x7, 0x6, 0x200, 0x1000000b62e, 0x7, 0x6a7}}}, 0x60)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x210000, 0x0)
ftruncate(r0, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x52, 0x4)

[  852.035794][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  852.051200][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  852.082992][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  852.094008][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  852.121162][T10777] binder: 10767:10777 unknown command 536871040
03:03:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a, 0xf0ffffff00000000}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x1b, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  852.176460][T10777] binder: 10767:10777 ioctl c0306201 20000440 returned -22
03:03:30 executing program 5 (fault-call:7 fault-nth:10):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  852.230269][T10875] binder: 10767:10875 ioctl c0306201 200002c0 returned -14
[  852.266111][T10875] binder_alloc: binder_alloc_mmap_handler: 10767 20001000-20004000 already mapped failed -16
03:03:30 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x1})
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:30 executing program 1:
clock_nanosleep(0x0, 0x1, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x28b, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x1, r1}}, 0x84c4e6c4734ba3d)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xbf)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x8001, 0x5, 0x2})

[  852.353962][T10875] binder: 10767:10875 unknown command 536871040
[  852.353966][T10777] binder: BINDER_SET_CONTEXT_MGR already set
[  852.353991][T10777] binder: 10767:10777 ioctl 40046207 0 returned -16
[  852.416422][T10875] binder: 10767:10875 ioctl c0306201 20000440 returned -22
[  852.460620][T11054] Unknown ioctl 1074819274
03:03:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x1c, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  852.482275][ T7897] binder: unexpected work type, 4, not freed
[  852.505453][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  852.539023][ T7897] binder: undelivered transaction 3159, process died.
03:03:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8048000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  852.670553][T11255] binder: 11254:11255 unknown command 536871040
[  852.684858][T11255] binder: 11254:11255 ioctl c0306201 20000440 returned -22
[  852.699360][T11255] binder: 11254:11255 ioctl c0306201 200002c0 returned -14
[  852.709194][T11273] binder_alloc: binder_alloc_mmap_handler: 11254 20001000-20004000 already mapped failed -16
03:03:30 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000440), &(0x7f0000000480)=0x4)
sendmsg$alg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="8ffc215b6dab7f6d04ce3f8abbfd77dfe1791c9e19cd3902ce0b276cc6a18a91d68871f711d8d5403cc3b03a82b5e1e883e00db2dad1dad6c99e2f51d76cc43a38addc97cd8d6d7f", 0x48}, {&(0x7f00000004c0)="7971cb85eed554356a680a4bc89429bc3f0df6fdef8c1521e79c21a6d190808f61a0da583650b0d7ecdffed294ed6dbca4bf54ca5a1619eee41b88c589f4d66afc9d2b733248ea41fbad901d9a9b2b56e3c676e2fcffce86daa7d0a4d56055243d2cc84d6e4b6da0d35890bd69de9b2ceb95d2237fd9cd8db45c9de28cdc6f1023686aaa4566d7d4585b4a11d486660d996d6dc50a45a02f4023548091ced566af4b0b148cbb464c850cd8261e01336b335b", 0xb2}, {&(0x7f0000000140)="c9c5335a3ed741f5bdb20718812d6710a2609daaabc4f919630277e72ff595cae92dab4a730d9c4a1985c672d10a53294990f5ff45a9e48766801c5df359bf7c92d03943f76566b0f711bebd2650403c0966c2dca978794ab7bd8f31fb23423e5dc0ceec50fe7f4e3cf848dbe9550f81cbd09e6be99aace5b63fff52a9d0e061c81ee0c948e53097225b7dbdfa13c2efe44bbcf89f005a6fb88d9773941e21d6295128cbeead36fe0681c2dd354f60b8d54cece7534e930e1691349fb5", 0xbd}, {&(0x7f0000000200)="af536d8f1b933731e96a8d796d96cf737c457a8d2841fef78b283c002c9e22d2c5d7750a4db498a5fc4dc0dfa464c19855959319075fe1722586992ea1eb0e63fd735ae41c19e76f3c9b3285930b24e6520fd7ca4bd9d0a23126cbabec6e1f29941713a9509b4311e4b11a9ef91f08a4b4b198751449775d73b12c5d", 0x7c}, {&(0x7f0000000280)="ab2a07b4e647bad2d702974c3c0b6a5c92b601deb8af2637bb7ea2bb3681e399d0382ac2308829e67d19f6484a2e720323b77a5ee7ba89004d5963650e7d73e7e5093cc8af44bfdbe9a9667982078bb86342d6d1ba9a23bbfa3551ac552abf4efa9cc1e289860c8063626b07093e1a0cf72a5ebb91d63a75cb28c3c0d0d3323eedcdf7338808f920248fa6f3d47a0ee44c2c863f4d8eed28259ea60e4ccd37f1e68d6b299615eecaf3cef625da2b9fd06abd06d3229b6b4f34d1523186558660c066db703beaac3442c74ac4c5", 0xcd}], 0x5, &(0x7f00000003c0)=[@assoc={0x10, 0x117, 0x4, 0xff}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x7445b469}], 0x30, 0x4040}, 0x2)

03:03:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x1d, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  852.721418][T11255] binder: BINDER_SET_CONTEXT_MGR already set
[  852.729260][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  852.735167][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  852.743628][T11273] binder: 11254:11273 unknown command 536871040
[  852.763990][T11255] binder: 11254:11255 ioctl 40046207 0 returned -16
03:03:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8121000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  852.783714][ T5064] binder: unexpected work type, 4, not freed
[  852.790475][T11273] binder: 11254:11273 ioctl c0306201 20000440 returned -22
[  852.798010][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  852.809729][ T5064] binder: undelivered transaction 3163, process died.
03:03:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x2}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  852.918223][T11430] binder: 11402:11430 unknown command 536871040
[  852.951626][T11430] binder: 11402:11430 ioctl c0306201 20000440 returned -22
03:03:30 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x200401)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x41e953e4}, 0x4)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r2 = syz_open_dev$mouse(0x0, 0x4, 0x1)
recvfrom$inet(r2, &(0x7f0000000080)=""/17, 0x11, 0x40002000, 0x0, 0x0)

03:03:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x1e, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  852.971841][T11485] binder: 11402:11485 ioctl c0306201 200002c0 returned -14
03:03:30 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x400001)
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x3ff, 0x1, &(0x7f0000000080)=0x1})
write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x21, 0x2, 0x1}, 0x6}}, 0x18)
clock_nanosleep(0x2020000000000003, 0x0, 0x0, 0x0)
flistxattr(r0, &(0x7f0000000180)=""/45, 0x2d)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
clock_nanosleep(0x6, 0x0, &(0x7f0000000140)={r1, r2+10000000}, 0x0)
clock_getres(0x7, &(0x7f0000000100))

[  853.015384][T11485] binder_alloc: binder_alloc_mmap_handler: 11402 20001000-20004000 already mapped failed -16
[  853.047812][T11430] binder: BINDER_SET_CONTEXT_MGR already set
[  853.088220][T11485] binder: 11402:11485 unknown command 536871040
[  853.101859][ T5064] binder: unexpected work type, 4, not freed
[  853.114410][T11430] binder: 11402:11430 ioctl 40046207 0 returned -16
[  853.123131][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8129000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  853.139047][ T5064] binder: undelivered transaction 3167, process died.
[  853.146797][T11485] binder: 11402:11485 ioctl c0306201 20000440 returned -22
[  853.243607][T11712] binder: 11691:11712 unknown command 536871040
03:03:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xffff, 0x400040)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x4000)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x2}], 0x924924924924999, 0x0)
recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:31 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

03:03:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x21, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  853.286745][T11712] binder: 11691:11712 ioctl c0306201 20000440 returned -22
[  853.381071][T11722] binder: 11691:11722 ioctl c0306201 200002c0 returned -14
[  853.401209][T11722] binder_alloc: binder_alloc_mmap_handler: 11691 20001000-20004000 already mapped failed -16
[  853.414233][T11712] binder: BINDER_SET_CONTEXT_MGR already set
[  853.424224][T11722] binder: 11691:11722 unknown command 536871040
03:03:31 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80000, 0x0)
r1 = dup2(r0, r0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000000000)=0x1)
clock_nanosleep(0x1000002, 0xffffffffffffffff, 0x0, 0x0)

[  853.431431][T11712] binder: 11691:11712 ioctl 40046207 0 returned -16
[  853.438858][T11722] binder: 11691:11722 ioctl c0306201 20000440 returned -22
[  853.464486][ T7897] binder: unexpected work type, 4, not freed
[  853.473474][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8150000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  853.503806][ T7897] binder: undelivered transaction 3171, process died.
03:03:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x22, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  853.563938][T11828] binder: 11827:11828 unknown command 536871040
[  853.581092][T11828] binder: 11827:11828 ioctl c0306201 20000440 returned -22
[  853.597580][T11828] binder: 11827:11828 ioctl c0306201 200002c0 returned -14
03:03:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xf}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  853.608980][T11863] binder_alloc: binder_alloc_mmap_handler: 11827 20001000-20004000 already mapped failed -16
[  853.633825][T11828] binder: BINDER_SET_CONTEXT_MGR already set
[  853.655101][T11863] binder: 11827:11863 unknown command 536871040
[  853.674746][T11828] binder: 11827:11828 ioctl 40046207 0 returned -16
[  853.699723][ T5064] binder: unexpected work type, 4, not freed
[  853.715991][T11863] binder: 11827:11863 ioctl c0306201 20000440 returned -22
03:03:31 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001380)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/56, 0x38}, {&(0x7f00000010c0)=""/75, 0x4b}, {&(0x7f0000001140)=""/201, 0xc9}, {&(0x7f0000001240)=""/189, 0xbd}], 0x5, &(0x7f0000001340)=""/42, 0x2a}, 0x102)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001400)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100000001}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad91}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffd}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

[  853.723804][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  853.748270][ T5064] binder: undelivered transaction 3175, process died.
03:03:31 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r2 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
fcntl$setstatus(r2, 0x4, 0x44c00)

03:03:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8350000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x23, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  853.940773][T12091] binder: 12057:12091 unknown command 536871040
[  853.967931][T12091] binder: 12057:12091 ioctl c0306201 20000440 returned -22
03:03:31 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x8080)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={<r1=>0x0, 0x8, 0x14}, &(0x7f0000000080)=0x8)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000140)={r2, r3/1000+10000}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8000}, 0x8)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  854.000837][T12153] binder: 12057:12153 ioctl c0306201 200002c0 returned -14
[  854.026168][T12091] binder_alloc: binder_alloc_mmap_handler: 12057 20001000-20004000 already mapped failed -16
[  854.054573][T12153] binder: 12057:12153 unknown command 536871040
[  854.068999][T12091] binder: BINDER_SET_CONTEXT_MGR already set
[  854.077146][T12153] binder: 12057:12153 ioctl c0306201 20000440 returned -22
[  854.088999][T12091] binder: 12057:12091 ioctl 40046207 0 returned -16
[  854.106683][ T5064] binder: unexpected work type, 4, not freed
[  854.118930][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  854.137304][ T5064] binder: undelivered transaction 3179, process died.
03:03:32 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0), 0xa3}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x9c0e000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x24, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x35a}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:32 executing program 1:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)

[  854.278726][T12367] binder: 12365:12367 unknown command 536871040
[  854.330449][T12367] binder: 12365:12367 ioctl c0306201 20000440 returned -22
[  854.338068][T12427] binder: 12365:12427 ioctl c0306201 200002c0 returned -14
03:03:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x25, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  854.407774][T12427] binder_alloc: binder_alloc_mmap_handler: 12365 20001000-20004000 already mapped failed -16
03:03:32 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x89, @rand_addr=0x791d189e, 0x4e24, 0x4, 'sed\x00', 0x8, 0x800, 0x3a}, 0x2c)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000080)={0xeb, &(0x7f00000002c0)=""/235})
pipe2(&(0x7f0000000040), 0x800)

03:03:32 executing program 1:
clock_nanosleep(0x1, 0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x1, 0x1001000, 0xa000})

[  854.494722][T12367] binder: BINDER_SET_CONTEXT_MGR already set
[  854.539235][T12367] binder: 12365:12367 ioctl 40046207 0 returned -16
03:03:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0xfffffffffffffddf)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  854.582394][T12551] binder: 12365:12551 unknown command 536871040
[  854.628880][ T5064] binder: undelivered transaction 3183, process died.
[  854.665688][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x26, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  854.682951][T12551] binder: 12365:12551 ioctl c0306201 20000440 returned -22
03:03:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x0, 0x2)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180))
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:32 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10401, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0xffffffff00000001, 0x5, 0x0, 0x0, [{r0, 0x0, 0xff}, {r0, 0x0, 0xfff}, {r0, 0x0, 0x10000}, {r0}, {r0}]})

03:03:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x9c30000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x27, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  854.931449][T12851] binder: 12850:12851 unknown command 536871040
03:03:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xf00}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:32 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
personality(0x7000002)
syz_open_dev$mouse(0x0, 0x1ba, 0xc0080)

03:03:32 executing program 1:
clock_nanosleep(0x8, 0x1, 0x0, 0x0)
r0 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
getresuid(&(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfce7, 0x680000)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000001c0)={0x74, &(0x7f0000000180)=[{}, {}, {}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8)
setresuid(r0, r1, r2)

[  854.978041][T12851] binder: 12850:12851 ioctl c0306201 20000440 returned -22
[  855.056681][T12909] binder: 12850:12909 ioctl c0306201 200002c0 returned -14
[  855.116087][T12909] binder: BINDER_SET_CONTEXT_MGR already set
[  855.116317][T12973] binder: 12850:12973 unknown command 536871040
03:03:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x28, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  855.184125][ T5064] binder: unexpected work type, 4, not freed
[  855.192686][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  855.202097][T12909] binder: 12850:12909 ioctl 40046207 0 returned -16
03:03:33 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2)
r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = signalfd(0xffffffffffffff9c, &(0x7f0000000080)={0x10c000000000000}, 0x8)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x6, 0x800, 0x2, 0x0, 0x0, [{r1, 0x0, 0x401}, {r2, 0x0, 0x4}]})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  855.277984][T12973] binder: 12850:12973 ioctl c0306201 20000440 returned -22
[  855.324430][ T7897] binder: undelivered transaction 3187, process died.
03:03:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x20000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:33 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x0, 0x10000})
ppoll(&(0x7f0000000080)=[{r0, 0x400}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x3ff}, 0x8)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00', 0x1000, "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"}, &(0x7f00000001c0)=0x1024)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000200))

03:03:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x29, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x200)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000003c0))
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000280)={0x5, @output={0x1000, 0x1, {0x0, 0x4}, 0xb6, 0x1}})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r3 = shmget(0x1, 0x3000, 0x54000200, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_LOCK(r3, 0xb)

03:03:33 executing program 1:
r0 = semget(0x3, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
getgroups(0x5, &(0x7f0000000140)=[<r2=>0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff])
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000240)=0xc)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000280)={{0x2, r1, r2, r3, r4, 0x90, 0x8}, 0xffff, 0x3ff, 0x3})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000300)=0x1c, 0x4)

[  855.547673][T13341] binder: 13340:13341 unknown command 536871040
[  855.582372][T13341] binder: 13340:13341 ioctl c0306201 20000440 returned -22
[  855.627432][T13372] binder: 13340:13372 ioctl c0306201 200002c0 returned -14
[  855.665590][T13372] binder_alloc_mmap_handler: 1 callbacks suppressed
[  855.665610][T13372] binder_alloc: binder_alloc_mmap_handler: 13340 20001000-20004000 already mapped failed -16
03:03:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x2a, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  855.735088][T13341] binder: BINDER_SET_CONTEXT_MGR already set
[  855.754559][T13341] binder: 13340:13341 ioctl 40046207 0 returned -16
03:03:33 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000001440)={<r0=>0xffffffffffffffff}, 0x80800)
connect$inet(r0, &(0x7f0000001480)={0x2, 0x4e21, @rand_addr=0x5}, 0x10)

[  855.789345][T13555] binder: 13340:13555 unknown command 536871040
[  855.818183][T13555] binder: 13340:13555 ioctl c0306201 20000440 returned -22
[  855.846224][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x3f000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x5a03}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
pipe(&(0x7f0000000140))
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x2b, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  855.977986][T13665] binder: 13662:13665 unknown command 536871040
[  856.055905][T13665] binder: 13662:13665 ioctl c0306201 20000440 returned -22
[  856.092637][T13740] binder: 13662:13740 ioctl c0306201 200002c0 returned -14
03:03:34 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x8)

03:03:34 executing program 4:
r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x8, 0x9e, 0x3ff, 0x0, 0x9, 0x200, 0x0, 0x7ff, 0x0, 0x22, 0x6, 0x100000000, 0x4dee, 0x0, 0x3, 0x0, 0x200, 0x8, 0x4, 0xf9, 0x2, 0x2, 0x80000001, 0x3ff, 0x5, 0x8001, 0x0, 0x560, 0x0, 0x1000, 0x9, 0x100000001, 0x9, 0x80000001, 0x7fff, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x4}, 0x203, 0x7fffffff, 0x20, 0x7, 0x5, 0x8001, 0x7}, 0xffffffffffffff9c, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x60, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x0, 0x20, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  856.149435][T13740] binder_alloc: binder_alloc_mmap_handler: 13662 20001000-20004000 already mapped failed -16
[  856.194052][T13665] binder: BINDER_SET_CONTEXT_MGR already set
[  856.263492][T13665] binder: 13662:13665 ioctl 40046207 0 returned -16
03:03:34 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x20000)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100))

03:03:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x2c, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  856.313290][T13881] binder: 13662:13881 unknown command 536871040
[  856.440129][T13665] binder_alloc: 13662: binder_alloc_buf, no vma
[  856.440154][ T7897] binder: unexpected work type, 4, not freed
[  856.454523][T13881] binder: 13662:13881 ioctl c0306201 20000440 returned -22
[  856.491272][ T7897] binder_cleanup_transaction: 1 callbacks suppressed
[  856.491281][ T7897] binder: undelivered transaction 3195, process died.
[  856.525250][T13665] binder: 13662:13665 transaction failed 29189/-3, size 24-8 line 3147
03:03:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x2000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  856.603065][T13665] binder: 13662:13665 ioctl c0306201 200002c0 returned -14
[  856.616802][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:34 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x8000, 0x8001, 0x2, 0xfffffffffffffffc, 0x5, 0xb6, 0x5, <r1=>0x0}, &(0x7f0000000080)=0x20)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x6, 0x1755, 0x3ff}, &(0x7f0000000100)=0x10)

03:03:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x48000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x2f, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  856.765571][T14101] binder: 14098:14101 unknown command 536871040
[  856.787785][T14101] binder: 14098:14101 ioctl c0306201 20000440 returned -22
03:03:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = dup2(r0, r0)
setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000280)=""/214, 0xd6}, &(0x7f0000000140), 0x4}, 0x20)

[  856.821803][T14101] binder: 14098:14101 ioctl c0306201 200002c0 returned -14
03:03:34 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='uservboxnet0cgroup\x00', 0xfffffffffffffffc)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2df983f6449e4ba8b8cf1f65bb48aa72032c491f78cfa440382c131f35b7a133fe011e5fb88489947acd62d1ad4e56f077cbb4e09546979369aaac9e980b77a213ad0afee5064e641e88e9a4f13b741c336a76efc078697c5a471c85b22f69d68f88358b94990420db875500e7450d0f6da22fc8f1048212f454a939840fb722aa0e5082ab899e00da1488e3b0dfa164282f41661ea6c8c60d46f16b245e63e8a9eae0732c36", 0xa6, r1)
pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
clock_gettime(0x0, &(0x7f0000000340))
clock_nanosleep(0x0, 0x1, &(0x7f0000000440)={0x77359400}, 0x0)
socket$rds(0x15, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})
r2 = getpgrp(0x0)
sched_rr_get_interval(r2, &(0x7f0000000300))
syz_open_dev$mouse(0x0, 0x1ba, 0x0)
socket$inet(0x2, 0x8, 0x40)

[  856.890714][T14101] binder: BINDER_SET_CONTEXT_MGR already set
[  856.891729][T14287] binder: 14098:14287 unknown command 536871040
03:03:34 executing program 1:

03:03:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x34, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  856.962716][ T5064] binder: unexpected work type, 4, not freed
[  856.969541][ T5064] binder_release_work: 1 callbacks suppressed
[  856.969546][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  856.986337][T14101] binder: 14098:14101 ioctl 40046207 0 returned -16
03:03:35 executing program 1:
clock_nanosleep(0x4, 0x0, 0x0, 0x0)

[  857.127648][T14287] binder: 14098:14287 ioctl c0306201 20000440 returned -22
03:03:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4c000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:35 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='user@em1self[\x00', 0xe, 0x2)
clock_nanosleep(0x3, 0x0, 0x0, 0x0)

[  857.298342][ T5064] binder: undelivered transaction 3200, process died.
03:03:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x35, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xf000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x440a00)
ioctl$TUNATTACHFILTER(r2, 0x400854d5, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0xad, 0x3, 0x9, 0x3}, {0x0, 0x1, 0x7f, 0x2}, {0x40, 0x8001}, {0x0, 0x4, 0x7f, 0x6}, {0x1000, 0x2, 0x7f, 0x7fff}, {0x9, 0xd4a, 0x9, 0x80}]})
mq_open(&(0x7f0000000180)='morus640-generic\x00', 0x0, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x3, 0x0, 0xffffffffffffe00b, 0x6, 0x2, 0xffff})
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140))
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  857.595466][T14447] binder: 14445:14447 unknown command 536871040
[  857.639589][T14447] binder: 14445:14447 ioctl c0306201 20000440 returned -22
[  857.654747][T14549] binder: 14445:14549 ioctl c0306201 200002c0 returned -14
03:03:35 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x1a, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f00000000c0)={{r1, r2+30000000}, {0x77359400}}, &(0x7f0000000100))

03:03:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x59616d61, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  857.756448][T14549] binder_alloc: binder_alloc_mmap_handler: 14445 20001000-20004000 already mapped failed -16
[  857.823744][T14447] binder: 14445:14447 unknown command 536871040
[  857.876771][T14646] binder: BINDER_SET_CONTEXT_MGR already set
[  857.915121][T14447] binder: 14445:14447 ioctl c0306201 20000440 returned -22
03:03:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x1, 0x8000000000001, &(0x7f0000000000)={0x77359400}, 0x0)
syz_open_dev$mouse(0x0, 0x1bb, 0x0)

[  857.970483][T14646] binder: 14445:14646 ioctl 40046207 0 returned -16
[  857.977425][ T7897] binder: undelivered transaction 3204, process died.
[  857.989464][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x60000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:35 executing program 1:
clock_nanosleep(0x1, 0x0, 0x0, 0x0)

03:03:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x5a030000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:36 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x12002, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x2, 0x1f})
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)

[  858.212735][T14864] binder: 14862:14864 unknown command 536871040
[  858.246509][T14864] binder: 14862:14864 ioctl c0306201 20000440 returned -22
[  858.249205][    C1] net_ratelimit: 24 callbacks suppressed
[  858.249212][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  858.253997][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  858.259587][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  858.265313][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  858.271142][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  858.288353][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  858.329233][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  858.335127][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  858.400182][T14906] binder: 14862:14906 ioctl c0306201 200002c0 returned -14
03:03:36 executing program 1:
clock_nanosleep(0x4002, 0x4, 0x0, 0x0)

[  858.455603][T14864] binder: BINDER_SET_CONTEXT_MGR already set
[  858.481505][T14906] binder_alloc: binder_alloc_mmap_handler: 14862 20001000-20004000 already mapped failed -16
03:03:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x14, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  858.539977][T14864] binder: 14862:14864 ioctl 40046207 0 returned -16
[  858.588673][T15015] binder: 14862:15015 unknown command 536871040
03:03:36 executing program 1:
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  858.663747][T15015] binder: 14862:15015 ioctl c0306201 20000440 returned -22
[  858.771880][ T7897] binder: undelivered transaction 3208, process died.
[  858.778757][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x68000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:36 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x4200)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0x7}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x802c}, &(0x7f0000000100)=0x8)
ioctl$KVM_NMI(r0, 0xae9a)

03:03:36 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x10000000000001, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x1, 0x0, 0x1)
r1 = dup(r0)
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040))
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = dup3(r1, r0, 0x80000)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000540)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="690000005136c3f0576196997f59f11e8a51dc1bd124b385668e57bdf1853111c3f8719ba191cfe492d3d7df4f039b3b2191ef9fb0f94f119779f145b8b7965c8a09bccf415977b9eb2ae87c5f9916a0733dd7096686b077af1a78a346d2ca27077369f35fd494552038a052a3"], &(0x7f00000007c0)=0x71)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000800)={r3, 0x4}, 0x8)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')

03:03:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x38, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  858.944751][T15194] binder: 15193:15194 unknown command 536871040
[  858.969218][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  858.971161][T15194] binder: 15193:15194 ioctl c0306201 20000440 returned -22
[  858.975106][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  859.018658][T15222] binder: 15193:15222 ioctl c0306201 200002c0 returned -14
03:03:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x8dffffff}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  859.069696][T15222] binder_alloc: binder_alloc_mmap_handler: 15193 20001000-20004000 already mapped failed -16
[  859.090066][T15194] binder: BINDER_SET_CONTEXT_MGR already set
[  859.097137][T15222] binder: 15193:15222 unknown command 536871040
[  859.109657][T15194] binder: 15193:15194 ioctl 40046207 0 returned -16
[  859.112699][T15222] binder: 15193:15222 ioctl c0306201 20000440 returned -22
[  859.131296][ T7897] binder: unexpected work type, 4, not freed
[  859.138207][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:37 executing program 1:
clock_nanosleep(0x24, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4080, 0x0)
finit_module(r0, &(0x7f0000000040)='ppp1cgroup]vmnet0vmnet1keyring\x00', 0x2)

03:03:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  859.189343][ T7897] binder: undelivered transaction 3212, process died.
03:03:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6c000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  859.424409][T15556] binder: 15519:15556 unknown command 536871040
03:03:37 executing program 1:
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=<r0=>0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1ff, &(0x7f0000000040)=""/184)

[  859.481481][T15556] binder: 15519:15556 ioctl c0306201 20000440 returned -22
03:03:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x14, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  859.544636][T15599] binder: 15519:15599 ioctl c0306201 200002c0 returned -14
[  859.607080][T15599] binder_alloc: binder_alloc_mmap_handler: 15519 20001000-20004000 already mapped failed -16
[  859.669398][T15556] binder: BINDER_SET_CONTEXT_MGR already set
[  859.700828][T15730] binder: 15519:15730 unknown command 536871040
03:03:37 executing program 1:
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff, 0x200240)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000080)={0x100, &(0x7f0000000040)="e36bf6890f0c5e7f4a74878c00438aa6afe0d847b3ed0e00ea227385a8430aac6bb2e322371a481481ef95"})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffff9c, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x8, 0x803, 0x9]}, 0xa)

[  859.714634][T15556] binder: 15519:15556 ioctl 40046207 0 returned -16
[  859.725387][T15730] binder: 15519:15730 ioctl c0306201 20000440 returned -22
[  859.747220][ T5064] binder: unexpected work type, 4, not freed
[  859.747797][T15556] binder_alloc: 15519: binder_alloc_buf, no vma
[  859.755174][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

03:03:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xf0ffffff}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  859.785572][T15556] binder: 15519:15556 transaction failed 29189/-3, size 24-8 line 3147
[  859.807758][ T5064] binder: undelivered transaction 3216, process died.
[  859.826005][T15556] binder: 15519:15556 ioctl c0306201 200002c0 returned -14
03:03:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
accept4$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80000)

03:03:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x38, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  859.869800][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x74000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:37 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7b)

[  860.048049][T15954] binder: 15952:15954 unknown command 536871040
[  860.114902][T15954] binder: 15952:15954 ioctl c0306201 20000440 returned -22
[  860.115493][T16004] binder: 15952:16004 ioctl c0306201 200002c0 returned -14
03:03:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:38 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  860.368036][T16004] binder_alloc: binder_alloc_mmap_handler: 15952 20001000-20004000 already mapped failed -16
[  860.390994][T15954] binder: BINDER_SET_CONTEXT_MGR already set
[  860.407135][T16004] binder: 15952:16004 unknown command 536871040
03:03:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x20000000000001c0, 0x4000)

[  860.415094][T16004] binder: 15952:16004 ioctl c0306201 20000440 returned -22
[  860.433188][T15954] binder: 15952:15954 ioctl 40046207 0 returned -16
[  860.443516][ T7897] binder: unexpected work type, 4, not freed
03:03:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xffffff8d}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  860.471481][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  860.507358][ T7897] binder: undelivered transaction 3221, process died.
03:03:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7a000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:38 executing program 1:
clock_nanosleep(0x8, 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x15, 0x7, @thr={&(0x7f0000000000), &(0x7f0000000040)="5f1218106d31b29a46f87426d15e361406494aee82f44a831bbd3184b14f716cb51ac1731acde4fcbb0b324b0c14b3e9929e36bc43a28a59d9bace2fdf5b119e5a38f409bb203b1872cd0953fb2f2a212c5fc4a10e96ff747a4b3a153b66f6c65c9b6609236231244525a93e6455cd15cfd1fd2978539f7297cecc6f49ede3cdc157ab96f01f124eacb9fcd23a88e21e97abd553e51cfe58d93469fdaf97c3ea09ac5a252037c28d2339ef87f2f3963724233fbd769c"}}, &(0x7f0000000140)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{r1, r2+30000000}}, &(0x7f0000000200))
r3 = creat(&(0x7f0000000440)='./file0\x00', 0x10)
getsockopt$inet6_dccp_int(r3, 0x21, 0x1b, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000300)=""/75, 0x4b, <r5=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x10, &(0x7f00000003c0)={&(0x7f0000000240)=""/145, 0x91, r5}}, 0x10)

[  860.684296][T16278] binder: 16277:16278 unknown command 536871040
[  860.708494][T16278] binder: 16277:16278 ioctl c0306201 20000440 returned -22
[  860.745046][T16278] binder: 16277:16278 ioctl c0306201 200002c0 returned -14
[  860.773332][T16381] binder_alloc: binder_alloc_mmap_handler: 16277 20001000-20004000 already mapped failed -16
[  860.819239][T16278] binder: BINDER_SET_CONTEXT_MGR already set
[  860.836742][T16278] binder: 16277:16278 ioctl 40046207 0 returned -16
03:03:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x9f)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:38 executing program 1:
clock_nanosleep(0x2, 0x1, 0x0, 0x0)

[  860.863184][T16383] binder: 16277:16383 unknown command 536871040
[  860.914013][T16278] binder_alloc: 16277: binder_alloc_buf, no vma
[  860.944008][ T7897] binder: unexpected work type, 4, not freed
[  860.952079][T16383] binder: 16277:16383 ioctl c0306201 20000440 returned -22
03:03:38 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x40101, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x80, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={<r1=>0xffffffffffffff9c})
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)={r2})
signalfd(r1, &(0x7f00000001c0)={0x1f}, 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8)
sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)={0x7, 0x84, 0x3f, {0x0, 0x2710}, {0x77359400}, {0x1, 0x3, 0xad8, 0x8}, 0x1, @can={{0x1, 0x9, 0x3, 0x8}, 0x3, 0x0, 0x0, 0x0, "333ced9ecf4e65d3"}}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  860.959603][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  860.983408][ T7897] binder: undelivered transaction 3225, process died.
[  860.997324][T16278] binder: 16277:16278 transaction failed 29189/-3, size 24-8 line 3147
03:03:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x2)
write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0x0, 0x3}, 0x10)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  861.036124][T16278] binder: 16277:16278 ioctl c0306201 200002c0 returned -14
03:03:39 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x80000)
write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x4}}, 0x18)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x20002)

03:03:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  861.137180][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xff600000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:39 executing program 1:
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x105000, 0x0)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/netstat\x00')
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8000000000f23d80f21f835c00000c00f23f8f721f3f20f01733e66baf80cb8948c3b8aef66bafc0cb099ee0f3acc848200600000ccc4e1fa7f3cff0f20d835080000000f22d8660f3881910bf39e18b924080000b8fdff0000ba000000000f300f20e035400000000f22e0", 0x6c}], 0x1, 0x40, &(0x7f0000000140)=[@cstype3={0x5, 0x3}, @cstype3={0x5, 0x1}], 0x2)

03:03:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xfffffff0}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  861.309981][T16610] binder: 16608:16610 unknown command 536871040
[  861.365818][T16610] binder: 16608:16610 ioctl c0306201 20000440 returned -22
[  861.366586][T16658] binder: 16608:16658 ioctl c0306201 200002c0 returned -14
[  861.429704][T16658] binder_alloc: binder_alloc_mmap_handler: 16608 20001000-20004000 already mapped failed -16
03:03:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:39 executing program 1:
clock_nanosleep(0x2, 0x1, 0x0, 0x0)

[  861.508067][T16610] binder: 16608:16610 unknown command 536871040
03:03:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
write$apparmor_current(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  861.566858][ T7897] binder: unexpected work type, 4, not freed
[  861.573788][T16610] binder: 16608:16610 ioctl c0306201 20000440 returned -22
[  861.583526][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  861.649315][ T7897] binder: undelivered transaction 3230, process died.
03:03:39 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = getpgid(0xffffffffffffffff)
ptrace$getenv(0x4201, r0, 0x3, &(0x7f0000000000))
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/70)

03:03:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x150800000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:39 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  861.912418][T16940] binder: 16936:16940 unknown command 536871040
[  861.950008][T16940] binder: 16936:16940 ioctl c0306201 20000440 returned -22
03:03:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:39 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000000, 0x101000)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))
clock_nanosleep(0x2, 0x0, 0x0, 0x0)

[  861.973802][T16940] binder: 16936:16940 ioctl c0306201 200002c0 returned -14
[  862.003387][T17131] binder_alloc: binder_alloc_mmap_handler: 16936 20001000-20004000 already mapped failed -16
[  862.039648][T16940] binder: BINDER_SET_CONTEXT_MGR already set
[  862.049477][T17131] binder: 16936:17131 unknown command 536871040
03:03:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x200000000000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  862.080712][T16940] binder: 16936:16940 ioctl 40046207 0 returned -16
[  862.094861][T17131] binder: 16936:17131 ioctl c0306201 20000440 returned -22
[  862.116680][ T7897] binder: unexpected work type, 4, not freed
[  862.126910][T16940] binder_alloc: 16936: binder_alloc_buf, no vma
[  862.142700][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  862.154742][T16940] binder: 16936:16940 transaction failed 29189/-3, size 24-8 line 3147
[  862.167204][ T7897] binder: undelivered transaction 3234, process died.
03:03:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:40 executing program 1:
clock_nanosleep(0x2, 0x1, 0x0, 0x0)

[  862.194868][T16940] binder: 16936:16940 ioctl c0306201 200002c0 returned -14
[  862.224675][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x350800000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:40 executing program 1:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x2)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xc, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x2200}, {r1, 0x2000}, {r2, 0x401}], 0x3, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x3}, 0x8)
clock_nanosleep(0x0, 0xfffffffffffffffc, 0x0, 0x0)
r3 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x98, 0x5ed1cca4, 0x1000, 0x20, 0x0, 0x0, 0x4000, 0x8, 0x3ff, 0x8000, 0x7, 0x27, 0x4, 0x6, 0x10001, 0x2, 0x8, 0x4, 0x7, 0x4, 0x3, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x9, 0x10001, 0x2, 0x5, 0x9, 0x5c6a, 0x3ff, 0x7ff, 0x7, 0x3, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x400, 0x8001, 0x3, 0x5, 0x9, 0x8, 0x5}, r3, 0xb, r2, 0x2)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))

03:03:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$read(0x0, &(0x7f00000000c0)=""/101, 0x65)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  862.414173][T17452] binder: 17433:17452 unknown command 536871040
[  862.439985][T17452] binder: 17433:17452 ioctl c0306201 20000440 returned -22
03:03:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x95, 0x8, 0x3, 0x1, 0x0, 0x7ff, 0x1000, 0x4, 0xfffffffffffffff7, 0x1, 0x4, 0x401, 0x0, 0x2, 0x2, 0x9, 0x1, 0x7, 0xe0b, 0x400, 0x1000, 0x1, 0x20, 0x7, 0x5, 0x9, 0xfffffffffffffff7, 0xb5, 0x5, 0x9, 0x6, 0xf97e, 0x5, 0xff, 0x4, 0x101, 0x0, 0x0, 0x2, @perf_config_ext={0x8001, 0x5}, 0xc, 0x7, 0x6, 0x9, 0x6, 0xfff, 0x6}, 0xffffffffffffffff, 0xb, r1, 0x8)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100))
r3 = gettid()
sched_rr_get_interval(r3, &(0x7f0000000040))
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x401)
getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@local, @multicast2}, &(0x7f00000001c0)=0x8)
unlink(&(0x7f0000000200)='./file0\x00')

[  862.463904][T17494] binder: 17433:17494 ioctl c0306201 200002c0 returned -14
[  862.502277][T17494] binder_alloc: binder_alloc_mmap_handler: 17433 20001000-20004000 already mapped failed -16
[  862.554054][T17452] binder: BINDER_SET_CONTEXT_MGR already set
[  862.574755][T17452] binder: 17433:17452 ioctl 40046207 0 returned -16
[  862.587164][T17572] binder: 17433:17572 unknown command 536871040
[  862.594125][T17572] binder: 17433:17572 ioctl c0306201 20000440 returned -22
03:03:40 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x4666, 0x4)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x82040, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={<r1=>0x0, 0x19, "ac03b4a6d9e7071333f332ad6345e414a42b49f605d747ed11"}, &(0x7f0000000080)=0x21)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x101, 0x20}, 0xc)

[  862.603504][T17452] binder_alloc: 17433: binder_alloc_buf, no vma
[  862.611022][ T7897] binder: unexpected work type, 4, not freed
[  862.620011][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  862.630055][T17452] binder: 17433:17452 transaction failed 29189/-3, size 24-8 line 3147
[  862.642064][ T7897] binder: undelivered transaction 3239, process died.
[  862.657219][T17452] binder: 17433:17452 ioctl c0306201 200002c0 returned -14
[  862.666467][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:40 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r2=>0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f0000000140)='morus640-generic\x00', 0xffffffffffffffff}, 0x30)
ptrace$getenv(0x4201, r2, 0x4, &(0x7f0000000280))
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r3 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x60ffffffffff, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xf00000000000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  862.841437][T17757] binder: 17750:17757 unknown command 536871040
[  862.848002][T17757] binder: 17750:17757 ioctl c0306201 20000440 returned -22
03:03:40 executing program 1:
clock_nanosleep(0x5, 0xfffffffffffffffe, 0x0, 0x0)

[  862.900212][T17795] binder: 17750:17795 ioctl c0306201 200002c0 returned -14
[  862.927960][T17795] binder_alloc: binder_alloc_mmap_handler: 17750 20001000-20004000 already mapped failed -16
03:03:40 executing program 1:
lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='/dev/vbi#\x00', 0x1cbc0355c4b32ca7, 0x1)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x7fff, 0x749, 0x8})
recvfrom$rxrpc(r0, &(0x7f0000000040)=""/117, 0x75, 0x20, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3ff, @dev={0xfe, 0x80, [], 0x1b}, 0x7}}, 0x24)
timer_create(0x7, &(0x7f0000000400)={0x0, 0x2c, 0x4, @thr={&(0x7f0000000240)="d4cf093b00f53dbefbda8257c6c98ed26f037575f1096b3e263823c9cdbf1d2407a9e1934293e3aa98a848a89fe608d4d58d9f5bd59c09fc742a5a181d92e25c4f4e7e17ae438a919d497a838fbcec3e025f7a5268b3d878cea3daff34406703a321ef04213d394aff9a9946e35c84ea6f8bba128562d9556de5e84ffd820009e5dfae3627cafedd6b317ab45e1e26b3b875ed9d75ea45efb2e2c45c4608f8c94a13bedb3d3ec55788195c633ce5c3e629692fc62fa28a2eec483c271e48bbced1b6fcdad160c4ef", &(0x7f0000000340)="96390cda4ef2cce4658747520e2cb24c479f7488c269c894583c10808e080124edd77772956c20aa5d57d03cc19ffa7d7a4b6b2b61a997d1295333bae35c3dd5d7747a6d66d033c1a688878f59f3aa174c4d4008a9b2212d6a91983d009d07cbc5329d039b5f1ab783af4b907e733a093d14247671137c5fe4c26268dc1e56125ba0106163448815ac315a463e3877318197c3b01eec66a55f660ddf226ed47b22ed45cd60a52f912228cba5d548ded7c98a8dbae117cef0c587"}}, &(0x7f0000000440)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}}, 0x0)

[  863.033147][T17757] binder: 17750:17757 unknown command 536871040
03:03:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  863.078089][ T5064] binder: undelivered transaction 3244, process died.
[  863.083983][T17757] binder: 17750:17757 ioctl c0306201 20000440 returned -22
[  863.090844][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7fffffffefff, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x5d42)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x500, 0x0)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0xfff, 0x1000])
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:41 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x204801, 0x100)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r1=>0x0, 0x24, "5c86aca09d2297eead2b84dda0595f6f07534aea707cbeefb41aeeb8da75190a677ce0be"}, &(0x7f0000000080)=0x2c)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="aee9c7bd04"], &(0x7f0000000100)=0x10)

[  863.305146][T18032] binder: 18015:18032 unknown command 536871040
[  863.326705][T18032] binder: 18015:18032 ioctl c0306201 20000440 returned -22
[  863.352677][T18061] binder: 18015:18061 ioctl c0306201 200002c0 returned -14
03:03:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0xdc, 0x40000)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000002c0)={{0x0, 0x5, 0x1ff, 0x4, 'syz0\x00', 0x5}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8001, 0x20c, 0x74a, 0x4, 0x0, 0x800, 0xbb, 0x46, 0x0, 0x1000, 0x0, 0x5e897358, 0x800, 0x0, 0x8, 0x8e0, 0x4, 0x5be1abf, 0x4, 0xfff, 0xb4, 0x39e95b7d, 0xffffffffffffff4d, 0x0, 0xe3, 0x8, 0x8, 0x7, 0x7b1f, 0x1, 0x4, 0x5, 0x5, 0x9, 0x2, 0x1ff, 0x400, 0x5, 0x5c7, 0x0, 0x7ff, 0x2, 0x3de, 0x80, 0x100, 0x1000, 0x100000001, 0xffffffffffffffe9, 0x8001, 0x3, 0x0, 0x80000000, 0x80000001, 0x9, 0x80000000, 0x2, 0x0, 0x6, 0x10001, 0x4, 0xfa8, 0x7, 0x0, 0x9, 0x8001, 0xec8b, 0xefc9, 0x1, 0x3, 0x460, 0x7ff, 0xfffffffffffffffd, 0x2, 0x401, 0x9, 0x7fffffff, 0x80000000, 0x631, 0x7ff, 0x80000000, 0x0, 0x8, 0xb4ae, 0x80, 0x7, 0x8, 0xffffffffffff8001, 0x8, 0x765ebe0, 0x2, 0x1, 0x7ff, 0x9, 0x7fff, 0x5, 0x5, 0x5c0a, 0x2631, 0x3, 0x3, 0x0, 0x3, 0x5, 0x8000, 0x8, 0x8, 0x200, 0x9, 0x7, 0x10000, 0x1000, 0x7, 0x2efd, 0x0, 0x65f, 0x0, 0x1, 0x322c, 0xaf2, 0x2, 0x5, 0x1, 0x1, 0x4]})

[  863.395875][T18061] binder_alloc: binder_alloc_mmap_handler: 18015 20001000-20004000 already mapped failed -16
03:03:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  863.460679][T18032] binder: BINDER_SET_CONTEXT_MGR already set
[  863.497052][T18032] binder: 18015:18032 ioctl 40046207 0 returned -16
[  863.501988][T18142] binder: 18015:18142 unknown command 536871040
[  863.537199][T18142] binder: 18015:18142 ioctl c0306201 20000440 returned -22
[  863.577746][T18032] binder_alloc: 18015: binder_alloc_buf, no vma
[  863.615128][ T7897] binder: unexpected work type, 4, not freed
[  863.624594][T18032] binder: 18015:18032 transaction failed 29189/-3, size 24-8 line 3147
[  863.634181][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  863.664715][ T7897] binder: undelivered transaction 3248, process died.
03:03:41 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x12}, 0x101}]}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="8aea2200b1549b8106f3282b84a96af4f44c9d31c80cec30071b3853ce47414fcf6d2fa6d2e9"], 0x2a)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0))
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000300)=""/192)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8200)
mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x80)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10)

03:03:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x5a03000000000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  863.679557][T18032] binder: 18015:18032 ioctl c0306201 200002c0 returned -14
[  863.711235][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xc30900000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  863.861222][T18366] binder: 18365:18366 unknown command 536871040
[  863.891827][T18366] binder: 18365:18366 ioctl c0306201 20000440 returned -22
03:03:41 executing program 4:
getrandom(&(0x7f0000000040)=""/11, 0xb, 0x1)
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x6480c0, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/28)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:41 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r1=>0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000140)='aead\x00'}, 0x30)
setpriority(0x1, r1, 0x5)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  863.969642][T18366] binder: 18365:18366 ioctl c0306201 200002c0 returned -14
03:03:41 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9dd, 0x2)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0))
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
personality(0x400000d)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000200)={0x9, &(0x7f0000000140)="44162016a37ded3ab0a78741a8c2b9f41670b6e938dcd6eb84072e1863976a5c7feed72b62b7af8c7de666ef3f7ddf26004caaf9dc589352c596b3bd6cdc07"})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x3, 0x4)

[  864.035057][T18503] binder_alloc: binder_alloc_mmap_handler: 18365 20001000-20004000 already mapped failed -16
[  864.063064][T18366] binder: BINDER_SET_CONTEXT_MGR already set
[  864.076702][T18503] binder: 18365:18503 unknown command 536871040
03:03:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  864.106045][T18366] binder: 18365:18366 ioctl 40046207 0 returned -16
[  864.169006][ T7897] binder: unexpected work type, 4, not freed
[  864.177932][T18503] binder: 18365:18503 ioctl c0306201 20000440 returned -22
[  864.196048][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:42 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8, 0x40)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000004c0)={<r4=>0x0, 0x180000000000, 0x10000}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000540)={r4, 0x4fde, 0x6, [0x3, 0x9, 0x7, 0x10001, 0x1086, 0x8]}, &(0x7f0000000580)=0x14)
ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000003c0)=0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r5=>0x0})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000440)={r5, 0x1, 0x6}, 0x10)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000300)={0x0, @aes256, 0x3, "545e58d06b5244f3"})
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@assoc={0x10, 0x117, 0x4, 0x71e99f7f}], 0x10}], 0x1, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x204011, 0x0)
getsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000780)={@initdev, @multicast2}, &(0x7f0000000740)=0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff})
ioctl$IMHOLD_L1(r6, 0x80044948, &(0x7f0000000180)=0x9)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000000480)={0x20, 0x5, 0x7f, 0x7, 0x1})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000006c0)={<r8=>0x0}, &(0x7f0000000700)=0xc)
ptrace$peekuser(0x3, r8, 0xffff)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  864.225811][ T7897] binder: undelivered transaction 3253, process died.
03:03:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x10120800000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:42 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
timer_create(0x7, &(0x7f0000001040)={0x0, 0x36, 0x3, @thr={&(0x7f0000000000)="7b2136a3a096c4bb89a899a7487562b3b3bf46", &(0x7f0000000040)="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"}}, &(0x7f0000001080)=<r0=>0x0)
timer_delete(r0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000001100)={0x1, 0x0, 'client0\x00', 0x5, "44e42ff9e3bd913d", "126f061bc9dd66f071edc73d6ccacf7e64b00752913b6ed7f3ed138217d28741", 0x4, 0x5})
write$input_event(r1, &(0x7f00000011c0)={{}, 0x0, 0x3, 0x1}, 0x10)

03:03:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0x8dffffff00000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  864.355691][T18748] binder: 18736:18748 unknown command 536871040
[  864.387885][T18748] binder: 18736:18748 ioctl c0306201 20000440 returned -22
03:03:42 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80802, 0x0)
write$P9_RREADDIR(r3, &(0x7f0000000280)={0x49, 0x29, 0x2, {0x1, [{{0x80, 0x3, 0x6}, 0xffffffffffffff92, 0x1, 0x7, './file0'}, {{0x21, 0x4, 0x8}, 0x7, 0x4, 0x7, './file0'}]}}, 0x49)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  864.424071][T18776] binder: 18736:18776 ioctl c0306201 200002c0 returned -14
[  864.489237][    C1] net_ratelimit: 26 callbacks suppressed
[  864.489282][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  864.489309][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  864.495083][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  864.507819][T18776] binder_alloc: binder_alloc_mmap_handler: 18736 20001000-20004000 already mapped failed -16
[  864.512421][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  864.528355][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  864.567809][T18776] binder: 18736:18776 unknown command 536871040
[  864.574301][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  864.574360][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  864.601789][T18776] binder: 18736:18776 ioctl c0306201 20000440 returned -22
03:03:42 executing program 1:
clock_nanosleep(0x2000000000002, 0x4, 0x0, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40)
close(r2)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x181000, 0x0)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000105a8d64706a121acf1ce62809d547", @ANYRES16=r1, @ANYBLOB="000329bd7000fcdbdf25050000000c00080004000000000000000c000500655b6a85428578c60c00030043540000000000000c00050006000000000000000c00060002000000000000001400070008000100", @ANYBLOB="ceef3064be5cdb8cebd4f50d531eb65ed50ed188ff87339071993bb7aa3b320264dec939121a707829744632bb3a71a4a2488cb509e8d503b70e0bbe360c81428bf3a331b7867b861e1be96672e3720b6cf48c5cc59cca2dce8621354e21afb7d0acc1983533c9770724ddccca664d7d2d56ad7cc74639dd62032491efb990ed7b092e1a2e0d416853c2", @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0c00060000000000000000000c0008006ce73032000000000c0002000100000001000000"], 0x7}, 0x1, 0x0, 0x0, 0x20000801}, 0x40010)

[  864.624907][ T7897] binder: unexpected work type, 4, not freed
[  864.634618][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  864.645216][ T7897] binder: undelivered transaction 3257, process died.
03:03:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x80040800000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:42 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101000, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(0x0, 0xde1, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000001c0)="33066cc5932892e4a583b723a83f44d8188a0a53047e67fd5e8848247b0b3c6329aab852f6a0c13e33c3d170848df28aac2f68c69e6beebf310585d7276ce703ede91cbdc57eb53b1b1333424395586bb723047d37a7ce9d138517b83fd63c925ca9ccbb5c76e63e4ceaaac8640e1ff63b509ca4af88e9e2e3027ea988ca8e159b8a91a81db8f835a6d91c0107bb491cd0027f3fafb16e9a833c830560")

03:03:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  864.811898][T19040] binder: 19027:19040 unknown command 536871040
[  864.854028][T19040] binder: 19027:19040 ioctl c0306201 20000440 returned -22
03:03:42 executing program 1:

[  864.903832][T19094] binder: 19027:19094 ioctl c0306201 200002c0 returned -14
03:03:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  864.966420][T19094] binder_alloc: binder_alloc_mmap_handler: 19027 20001000-20004000 already mapped failed -16
[  865.074640][T19040] binder: BINDER_SET_CONTEXT_MGR already set
[  865.102123][T19040] binder: 19027:19040 ioctl 40046207 0 returned -16
03:03:43 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = dup(0xffffffffffffff9c)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

[  865.129448][T19142] binder: 19027:19142 unknown command 536871040
[  865.153624][T19142] binder: 19027:19142 ioctl c0306201 20000440 returned -22
[  865.171744][ T7897] binder: undelivered transaction 3261, process died.
03:03:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xf0ffffff00000000}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000140)={'nr0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @host}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x90120800000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  865.209344][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  865.215341][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  865.218546][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  865.221720][    C0] protocol 88fb is buggy, dev hsr_slave_0
03:03:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  865.331937][T19234] binder: 19233:19234 unknown command 536871040
[  865.397689][T19234] binder: 19233:19234 ioctl c0306201 20000440 returned -22
[  865.398476][T19321] binder: 19233:19321 ioctl c0306201 200002c0 returned -14
03:03:43 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x7, 0xffff, 0x1})

[  865.534586][T19321] binder_alloc: binder_alloc_mmap_handler: 19233 20001000-20004000 already mapped failed -16
[  865.569280][T19234] binder: BINDER_SET_CONTEXT_MGR already set
03:03:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sysfs$3(0x3)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880), 0x0, 0x0, 0x0)
shmget$private(0x0, 0x1000, 0x78000002, &(0x7f0000fff000/0x1000)=nil)

[  865.598166][T19321] binder: 19233:19321 unknown command 536871040
[  865.626208][ T5064] binder: unexpected work type, 4, not freed
[  865.632401][T19234] binder: 19233:19234 ioctl 40046207 0 returned -16
[  865.639053][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  865.666792][ T5064] binder: undelivered transaction 3265, process died.
[  865.687409][T19321] binder: 19233:19321 ioctl c0306201 20000440 returned -22
03:03:43 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1000001ba, 0x80)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x7}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={<r2=>r1, 0x5, 0xcec2da13aa4e7f70}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x40000, 0x401, 0x1000, 0x2, 0x4}, 0x14)

03:03:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xe0c00900000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:43 executing program 1:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = geteuid()
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000480)=""/151)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = geteuid()
write$P9_RSTATu(r0, &(0x7f0000000400)={0x71, 0x7d, 0x2, {{0x0, 0x5c, 0x3, 0x5, {0x74, 0x2, 0x6}, 0x1010000, 0x1f, 0x0, 0x2, 0x5, 'IPVS\x00', 0x1, '-', 0x5, 'lblc\x00', 0x1e, '-procposix_acl_access%[trusted'}, 0x0, '', r1, r2, r3}}, 0x71)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x14000, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x158, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe43}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x26a}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x800)
clock_nanosleep(0x7, 0x1, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000300)={0x8001001, 0x1ff, 0x2})

03:03:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x2, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  865.857780][T19562] binder: 19548:19562 unknown command 536871040
[  865.883458][T19562] binder: 19548:19562 ioctl c0306201 20000440 returned -22
03:03:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  865.938308][T19646] binder: 19548:19646 ioctl c0306201 200002c0 returned -14
[  865.957478][T19646] binder_alloc: binder_alloc_mmap_handler: 19548 20001000-20004000 already mapped failed -16
[  865.997635][T19562] binder: BINDER_SET_CONTEXT_MGR already set
[  866.017198][T19646] binder: 19548:19646 unknown command 536871040
[  866.084053][ T7897] binder: unexpected work type, 4, not freed
[  866.090945][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  866.098178][T19562] binder: 19548:19562 ioctl 40046207 0 returned -16
[  866.119977][ T7897] binder: undelivered transaction 3269, process died.
03:03:44 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2400, 0x124)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x205, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7fff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040880)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000180)={0xfff, @remote})
syz_emit_ethernet(0xf8, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x3ff, 0x9}}], {@llc={0x4, {@snap={0x0, 0xab, "d8d1", "c59f6e", 0xcb37, "3773d6da3389b6a428752fdcd02c17338944922c708a6ad891267e7d85111a38e852395dd44efe4c587ce1ca604ba86eb4a9fcbc5cb8fa5764eb81e6ddcbbb0bab0fdd47ee84bfb0f00c8feb99e200b1859b7eecb8e634bd8b957216ca11829be00e61b77ef8b8489be2e0129b5fba0bc80e3d4ac3f1b6063a1cc99d8703a78e2fa594dc954c0cc8cbd51c2752f501aa2ddf5e63a084d65ea4d32092ff158c64c03f8d2800ee206796d637c5deedaaadf5acebf6f1d946e6bb77972cb517a8d34eb97b51dc9018327ae5a3c79c691445cebb182fe0a367c42adaaa5187"}}}}}, &(0x7f0000000100)={0x1, 0x2, [0xfa4, 0xe1c, 0x686, 0xdb5]})

[  866.134528][T19646] binder: 19548:19646 ioctl c0306201 20000440 returned -22
03:03:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x100000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  866.322650][T19863] binder: 19862:19863 unknown command 536871040
[  866.350331][T19863] binder: 19862:19863 ioctl c0306201 20000440 returned -22
[  866.371214][T19863] binder: 19862:19863 ioctl c0306201 200002c0 returned -14
[  866.413042][T19888] binder_alloc: binder_alloc_mmap_handler: 19862 20001000-20004000 already mapped failed -16
[  866.430614][T19863] binder: BINDER_SET_CONTEXT_MGR already set
[  866.448940][T19888] binder: 19862:19888 unknown command 536871040
[  866.456437][T19863] binder: 19862:19863 ioctl 40046207 0 returned -16
[  866.465651][T19888] binder: 19862:19888 ioctl c0306201 20000440 returned -22
[  866.476912][ T5064] binder: unexpected work type, 4, not freed
[  866.485066][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:44 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240), &(0x7f00000002c0)=0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={<r2=>0x0, 0x3f, 0x2}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x6f07}}, 0x80000001, 0x7, 0x3f, 0x2f, 0xd5}, &(0x7f00000001c0)=0x98)

03:03:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x200000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:44 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r0, 0x0, 0x0, 0x804)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:44 executing program 1:
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4)

03:03:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  866.716093][T20091] binder: 20084:20091 unknown command 536871040
03:03:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x200)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000400)={0x10001}, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x800, 0x400400)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=<r4=>0x0, @ANYBLOB="62eb00002867940b70dba915ec506bc79ee0a1c22af3909ecb462f87083c2d84a61404da9f55e0bc26df60f9b672ce2f8b6884a5de02eeb1ad3a558d03390e514aa7aa91e5edf009f1488074bb089c98ad5ab3899834eacaeee0e6269733a2e9faa882b73d7e"], &(0x7f0000000180)=0x6a)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r4, &(0x7f0000000340)=0x4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  866.763179][T20091] binder: 20084:20091 ioctl c0306201 20000440 returned -22
[  866.777983][T20176] binder: 20084:20176 ioctl c0306201 200002c0 returned -14
[  866.813550][T20176] binder_alloc: binder_alloc_mmap_handler: 20084 20001000-20004000 already mapped failed -16
[  866.845456][T20091] binder: BINDER_SET_CONTEXT_MGR already set
03:03:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  866.858836][T20176] binder: 20084:20176 unknown command 536871040
[  866.887871][T20091] binder: 20084:20091 ioctl 40046207 0 returned -16
03:03:44 executing program 1:
clock_nanosleep(0x4, 0xfffffffffffffffc, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0xc00)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x401, {{0xa, 0x4e20, 0x2, @loopback, 0xbef3}}}, 0x84)

[  866.938806][T20298] binder_alloc: 20084: binder_alloc_buf, no vma
[  866.940372][ T5064] binder: unexpected work type, 4, not freed
[  866.951863][T20176] binder: 20084:20176 ioctl c0306201 20000440 returned -22
[  866.991806][ T5064] binder_cleanup_transaction: 1 callbacks suppressed
[  866.991815][ T5064] binder: undelivered transaction 3277, process died.
[  867.068287][T20298] binder: 20084:20298 transaction failed 29189/-3, size 24-8 line 3147
[  867.132067][T20298] binder: 20084:20298 ioctl c0306201 200002c0 returned -14
03:03:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040))
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  867.191057][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x300000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:45 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x2100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x6, 0x1, {0x3, 0x3, 0x8, 0x1, 0x9}})
ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0)
clock_nanosleep(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x78d885c3, 0x1, 0x3, 0x6, 0x5b3cf877, 0x3, 0x80000001, 0x5, 0x2, 0xffffffffffff7301, 0xbf, 0x1000, 0x7}, {0x2, 0x6, 0x7, 0x7ff, 0x2, 0x0, 0x0, 0x7, 0x100000000, 0x40, 0x0, 0x1ff, 0x3}, {0x8e74, 0x3, 0x6, 0x4, 0x0, 0x6f9, 0x3, 0x401, 0x7, 0x9, 0x7, 0x0, 0x10000}], 0x6e})
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

03:03:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0xa, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  867.397292][T20541] binder: 20537:20541 unknown command 536871040
[  867.425953][T20541] binder: 20537:20541 ioctl c0306201 20000440 returned -22
03:03:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  867.491637][T20692] binder: 20537:20692 ioctl c0306201 200002c0 returned -14
[  867.538857][T20692] binder_alloc: binder_alloc_mmap_handler: 20537 20001000-20004000 already mapped failed -16
03:03:45 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000057, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0xfffffffffffffffc, 0xa, 0x5, 0x8}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000440))
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000003c0))

[  867.638813][T20541] binder: BINDER_SET_CONTEXT_MGR already set
[  867.638970][T20692] binder: 20537:20692 unknown command 536871040
03:03:45 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x8f)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = fcntl$dupfd(r1, 0x406, r0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000280))
r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7db, 0x100)
ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000180))
r4 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000980)={@local, <r5=>0x0}, &(0x7f00000009c0)=0x14)
r6 = geteuid()
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x1b, 0x5, 0x7e0, 0x19c, 0x0, 0x0, 0x0, 0x590, 0x714, 0x714, 0x714, 0x714, 0x714, 0x5, &(0x7f00000002c0), {[{{@ipv6={@loopback, @local, [0x0, 0xff000000, 0xffffffff, 0xffffff00], [0x37a80cf38950225b, 0xffffffff, 0xff0000ff, 0xff], 'eql\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x9, 0x7, 0x3}, 0x0, 0x154, 0x19c, 0x0, {}, [@common=@srh1={0x8c, 'srh\x00', 0x1, {0xaf, 0x4, 0x0, 0x7fff, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast1, @remote, [0xff000000, 0xff, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 0x0, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@multicast2, @ipv6=@rand_addr="bb986dba85bea5c15ecd22599142c792", @icmp_id=0x66, @gre_key=0x100000001}}}, {{@uncond, 0x0, 0x224, 0x26c, 0x0, {}, [@common=@mh={0x24, 'mh\x00', 0x0, {0x6, 0x5}}, @common=@rt={0x138, 'rt\x00', 0x0, {0x6ae0, 0x2, 0x1, 0x2fa8, 0x4, 0x0, [@empty, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @local, @loopback, @remote, @mcast2, @ipv4={[], [], @rand_addr=0x55f}, @loopback, @local, @ipv4={[], [], @multicast1}, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0xa}, @mcast1], 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x6, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0x7, @gre_key=0x8}}}, {{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0xd9, 0x3, 0x1, 0x22, 0x1}}, @common=@dst={0x48, 'dst\x00', 0x0, {0x7, 0x5, 0x1, [0x0, 0x0, 0x8001, 0x838a, 0xffffffffffffff80, 0x5, 0x0, 0xfffffffffffff001, 0xa7, 0x2, 0x101, 0x100, 0xfff, 0x64, 0x818, 0x6], 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@local, @gre_key=0x3, @icmp_id=0x64}}}, {{@ipv6={@remote, @ipv4={[], [], @rand_addr=0x4b4c}, [0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'hsr0\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x7fffffff, 0x26bbcd3356e4888b, 0x4}, 0x0, 0x13c, 0x184, 0x0, {}, [@common=@unspec=@nfacct={0x44, 'nfacct\x00', 0x0, {'syz1\x00', 0x7}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x4b6e, 0x9, 0x4, 0x1, 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x4, @icmp_id=0x64}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x83c)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@remote, @in6=@rand_addr="4b443048b6e4ea6bdd3608fe8400937a", 0x4e23, 0x2, 0x4e20, 0x6, 0x2, 0xa0, 0xa0, 0x73, r5, r6}, {0x7, 0x1, 0x5, 0x0, 0x800, 0x81, 0xd5, 0x1}, {0x10001, 0xfffffffffffff325, 0x1, 0x9}, 0x8, 0x6e6bc0, 0x0, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x3, 0x10001, 0x5, 0x10001, 0xfff}}, 0xe8)
recvmmsg(r4, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  867.683297][T20541] binder: 20537:20541 ioctl 40046207 0 returned -16
[  867.693350][T20692] binder: 20537:20692 ioctl c0306201 20000440 returned -22
03:03:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  867.751400][ T5064] binder: undelivered transaction 3282, process died.
[  867.758300][ T5064] binder_release_work: 1 callbacks suppressed
[  867.758305][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x400000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:45 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r1)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000140)=0x8)

03:03:45 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10007, 0x20000})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02")

[  867.894717][T20934] binder: 20931:20934 unknown command 536871040
[  867.911414][T20934] binder: 20931:20934 ioctl c0306201 20000440 returned -22
[  867.982986][T20999] binder: 20931:20999 ioctl c0306201 200002c0 returned -14
[  868.061202][T20999] binder_alloc: binder_alloc_mmap_handler: 20931 20001000-20004000 already mapped failed -16
03:03:46 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4004240b, &(0x7f0000000040)={0x1, 0x70, 0xdd, 0x8000000000000000, 0x0, 0x2, 0x0, 0x4257, 0x20000, 0x1, 0x49, 0xffffffff, 0xfffffffffffff800, 0x7, 0x2, 0x1, 0x3, 0x8, 0x8, 0x20, 0x7ff, 0xfffffffffffffffc, 0x6, 0x3f, 0x2, 0x6, 0x800, 0x0, 0xeb, 0x0, 0x7ff, 0xa7, 0x2, 0x10000, 0x1, 0x4, 0x3ede, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x7fff, 0x9, 0x7, 0x6655acee, 0x70, 0x9})
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={<r0=>0x0, 0x20}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xec, 0x6, 0x4, 0xa426, 0x2, 0x5, 0x2, 0x7, r0}, &(0x7f0000000180)=0x20)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

03:03:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  868.120909][T20934] binder: 20931:20934 unknown command 536871040
[  868.170688][T21058] binder_alloc: 20931: binder_alloc_buf, no vma
[  868.172983][ T7897] binder: unexpected work type, 4, not freed
[  868.184009][T20934] binder: 20931:20934 ioctl c0306201 20000440 returned -22
03:03:46 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06055c8, &(0x7f0000000280)={0x6, 0x1, {0x57, 0x2, 0xff, {0x8ab, 0x9}, {0x101, 0x9}, @period={0x0, 0x1000, 0x69, 0x6, 0x0, {0x6, 0x9, 0x8, 0x8}, 0x5, &(0x7f0000000140)=[0xffffffffffff7fff, 0x28, 0xfe, 0x435991e0, 0x800]}}, {0x57, 0x2, 0x3, {0x0, 0x20}, {0x80000000, 0x3f}, @rumble={0xffffffffffff6ab2, 0x9}}})
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  868.211176][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0xf, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  868.253819][ T7897] binder: undelivered transaction 3286, process died.
[  868.266054][T21058] binder: 20931:21058 transaction failed 29189/-3, size 24-8 line 3147
[  868.292795][T21058] binder: 20931:21058 ioctl c0306201 200002c0 returned -14
03:03:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x500000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  868.320655][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x8)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  868.477442][T21230] binder: 21213:21230 unknown command 536871040
[  868.520356][T21230] binder: 21213:21230 ioctl c0306201 20000440 returned -22
03:03:46 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x12\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
sendfile(r0, r1, &(0x7f0000000440), 0x5)
fcntl$addseals(r1, 0x409, 0x8)
fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240), 0x24, 0x0)

[  868.562304][T21358] binder: 21213:21358 ioctl c0306201 200002c0 returned -14
03:03:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = socket(0x15, 0x80f, 0x3)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090029bd7000ffdbdf251000000008eb0300070000001c0001000800050004000000080004004e20002348633ce9fa5d4500"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  868.688389][T21358] binder_alloc: binder_alloc_mmap_handler: 21213 20001000-20004000 already mapped failed -16
[  868.733029][T21230] binder: BINDER_SET_CONTEXT_MGR already set
[  868.777411][T21476] binder: 21213:21476 unknown command 536871040
[  868.782465][T21230] binder: 21213:21230 ioctl 40046207 0 returned -16
[  868.804941][T21476] binder: 21213:21476 ioctl c0306201 20000440 returned -22
03:03:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  868.847171][T21358] binder_alloc: 21213: binder_alloc_buf, no vma
[  868.872549][ T7897] binder: unexpected work type, 4, not freed
[  868.881134][T21358] binder: 21213:21358 transaction failed 29189/-3, size 24-8 line 3147
[  868.906576][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  868.927846][ T7897] binder: undelivered transaction 3291, process died.
[  868.950967][T21358] binder: 21213:21358 ioctl c0306201 200002c0 returned -14
[  868.970411][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:46 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xb294, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0245628, &(0x7f0000000040)={0x0, 0xfffffffeffffffff, 0x4, [], &(0x7f0000000000)=0x48b6})
ioctl$KVM_SMI(r0, 0xaeb7)

03:03:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f0000000100)=0x8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
recvmsg(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/125, 0x7d}, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

03:03:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r0, &(0x7f0000000500)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1d2}, 0x240088c4)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x1b}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000280)=""/154, 0x9a}}], 0x0, 0x0, 0x0)

03:03:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x10, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x600000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  869.080351][T21704] binder: 21702:21704 unknown command 536871040
[  869.119810][T21704] binder: 21702:21704 ioctl c0306201 20000440 returned -22
03:03:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  869.168088][T21719] binder: 21702:21719 ioctl c0306201 200002c0 returned -14
[  869.216725][T21719] binder_alloc: binder_alloc_mmap_handler: 21702 20001000-20004000 already mapped failed -16
03:03:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0000000000008000a22748f9a91c66b3", 0x60)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  869.289897][T21704] binder: BINDER_SET_CONTEXT_MGR already set
[  869.294842][T21719] binder: 21702:21719 unknown command 536871040
[  869.352025][ T7897] binder: unexpected work type, 4, not freed
[  869.359465][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  869.369322][T21704] binder: 21702:21704 ioctl 40046207 0 returned -16
[  869.391884][T21719] binder: 21702:21719 ioctl c0306201 20000440 returned -22
[  869.401796][ T7897] binder: undelivered transaction 3296, process died.
03:03:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
times(&(0x7f0000000140))
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x80000001, 0x20000)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:47 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x700000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:47 executing program 4:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x7, 0x48002)

[  869.726184][T21838] binder: 21836:21838 unknown command 536871040
[  869.755642][T21838] binder: 21836:21838 ioctl c0306201 20000440 returned -22
[  869.792616][T21894] binder: 21836:21894 ioctl c0306201 200002c0 returned -14
03:03:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80803, 0x9a8)
ioctl$sock_ifreq(r0, 0x895f, &(0x7f00000006c0)={'syzkaller1\x00', @ifru_settings={0x3, 0x1, @te1=&(0x7f0000000580)={0x3ff, 0x1f, 0x5, 0x10001}}})
r1 = syz_open_dev$video(&(0x7f0000000700)='/dev/video#\x00', 0x2, 0x8000)
ioctl$VIDIOC_S_FBUF(r1, 0x402c560b, &(0x7f0000000740)={0x0, 0x2e, &(0x7f00000027c0)="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", {0x5, 0x6, 0x7f45776d, 0xf, 0x3, 0xb2, 0xa, 0x9}})
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00')
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000004c0)={0x8001, {{0xa, 0x4e24, 0xffffffff00000001, @loopback, 0x9}}}, 0x84)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)}, {0x0, 0xca}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8)
setreuid(r5, r6)
prctl$PR_GET_FP_MODE(0x2e)
sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  869.838618][T21894] binder_alloc: binder_alloc_mmap_handler: 21836 20001000-20004000 already mapped failed -16
03:03:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  869.905770][T21838] binder: BINDER_SET_CONTEXT_MGR already set
[  869.954581][T21838] binder: 21836:21838 ioctl 40046207 0 returned -16
[  869.954808][T21991] binder: 21836:21991 unknown command 536871040
[  870.011786][T21894] binder_alloc: 21836: binder_alloc_buf, no vma
[  870.042506][T21991] binder: 21836:21991 ioctl c0306201 20000440 returned -22
[  870.055192][ T5064] binder: unexpected work type, 4, not freed
[  870.063932][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  870.102981][ T5064] binder: undelivered transaction 3300, process died.
[  870.181221][T21894] binder: 21836:21894 transaction failed 29189/-3, size 24-8 line 3147
[  870.249576][T21894] binder: 21836:21894 ioctl c0306201 200002c0 returned -14
[  870.257363][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:48 executing program 1:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000001000/0x2000)=nil, 0x2000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002)

03:03:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x34b, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000040)=""/121, &(0x7f00000000c0)=0x79)
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ifb0\x00', <r2=>0x0})
bind(r0, &(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0xf}, 0x80)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0x0, 0x8000, 0x100000000, 0x101})

03:03:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x800000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  870.729216][    C1] net_ratelimit: 23 callbacks suppressed
[  870.729223][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  870.729298][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  870.735182][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  870.755238][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  870.761635][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
epoll_create1(0x80000)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x670, 0x0, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x10580, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc)

[  870.786235][T22164] binder: 22163:22164 unknown command 536871040
[  870.809328][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  870.815293][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  870.864850][T22164] binder: 22163:22164 ioctl c0306201 20000440 returned -22
[  870.866620][T22178] binder: 22163:22178 ioctl c0306201 200002c0 returned -14
[  870.974181][T22178] binder_alloc: binder_alloc_mmap_handler: 22163 20001000-20004000 already mapped failed -16
03:03:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  871.049544][T22178] binder: 22163:22178 unknown command 536871040
[  871.094828][ T7897] binder: undelivered transaction 3305, process died.
[  871.099326][T22178] binder: 22163:22178 ioctl c0306201 20000440 returned -22
[  871.117121][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101100, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb0, r1, 0x800, 0x8, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x2000000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={<r1=>0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xec, 0x6, 0x4, 0xa426, 0x0, 0x5, 0x2, 0x7, r1}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

[  871.400519][T22491] binder: 22490:22491 unknown command 536871040
[  871.410210][T22492] QAT: Invalid ioctl
03:03:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  871.449248][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  871.455785][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  871.458865][T22491] binder: 22490:22491 ioctl c0306201 20000440 returned -22
[  871.462085][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  871.557110][T22495] binder: 22490:22495 ioctl c0306201 200002c0 returned -14
[  871.631170][T22495] binder_alloc: binder_alloc_mmap_handler: 22490 20001000-20004000 already mapped failed -16
[  871.653909][T22491] binder: BINDER_SET_CONTEXT_MGR already set
[  871.668100][T22495] binder: 22490:22495 unknown command 536871040
[  871.682186][T22491] binder: 22490:22491 ioctl 40046207 0 returned -16
[  871.693813][T22495] binder: 22490:22495 ioctl c0306201 20000440 returned -22
[  871.705973][ T7897] binder: unexpected work type, 4, not freed
03:03:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x7, 0xf, 0x15, 0xa, 0x3, 0x4, 0x1, 0x13e})
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000180)=0x7fff, 0x4)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  871.745632][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x35a, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  871.801456][ T7897] binder: undelivered transaction 3309, process died.
03:03:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x3f00000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  872.038106][T22615] binder: 22614:22615 unknown command 536871040
[  872.070856][T22615] binder: 22614:22615 ioctl c0306201 20000440 returned -22
[  872.117098][T22620] binder: 22614:22620 ioctl c0306201 200002c0 returned -14
[  872.158672][T22492] QAT: Invalid ioctl
03:03:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x2000, 0x0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000400)=""/94)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x100, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
getsockname(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xfffffc78)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r3 = accept4$alg(r1, 0x0, 0x0, 0x0)
r4 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x5, 0x8000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={<r5=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={<r6=>r5, 0x7}, &(0x7f0000000600)=0xfffffe9d)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000300)={r6, 0x3f3}, 0x8)
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
times(&(0x7f0000000380))
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)

[  872.186475][T22620] binder_alloc: binder_alloc_mmap_handler: 22614 20001000-20004000 already mapped failed -16
03:03:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x81, 0x0, 0x0, 0x5cd, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  872.250715][T22615] binder: BINDER_SET_CONTEXT_MGR already set
03:03:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  872.320622][T22615] binder: 22614:22615 ioctl 40046207 0 returned -16
[  872.367577][ T5064] binder: unexpected work type, 4, not freed
[  872.393722][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4800000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  872.438592][ T5064] binder: undelivered transaction 3313, process died.
03:03:50 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
fchdir(r0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  872.633907][T22926] binder: 22924:22926 unknown command 536871040
03:03:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  872.694858][T22926] binder: 22924:22926 ioctl c0306201 20000440 returned -22
[  872.751609][T22942] binder: 22924:22942 ioctl c0306201 200002c0 returned -14
[  872.794376][T22942] binder_alloc: binder_alloc_mmap_handler: 22924 20001000-20004000 already mapped failed -16
[  872.821776][T22926] binder: BINDER_SET_CONTEXT_MGR already set
[  872.873431][ T5064] binder: unexpected work type, 4, not freed
[  872.882311][T22926] binder: 22924:22926 ioctl 40046207 0 returned -16
[  872.894521][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  872.907133][ T5064] binder: undelivered transaction 3317, process died.
03:03:51 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c0754ddea420fae9972b571112d02")
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffeff8000, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x7f})

03:03:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x35b, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = getpgid(0xffffffffffffffff)
capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0x3f, 0x0, 0x1, 0x80000001, 0x3f, 0xffffffffffffff60})
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x4c00000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
clock_nanosleep(0x3, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  873.378081][T23070] binder: 23061:23070 unknown command 536871040
03:03:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1})
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={r0, r1+30000000}, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f0000000640)=[{&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="52d72752cdcdc0e2a00dc4e1aae313c39304d8020bf89d1dc0fdf5563d36241ab98043c9a93ba09f973070", 0x2b}, {&(0x7f00000001c0)="c7b692a518564a6c3ae72076e94780f5c1d109512270ae1e497eb5541397a29c3b35e0eb7d73d0920ff772e41ae85230daec27f2feafdf258c7e74b0c4306c68f94f236c509a93d656a0a9d689d93e8695b4fb7ba8656cced841f4c4f8e394c13e17c1681fdae43e6e9743f56128eb5894a1a57cd46257fc8bba8feeb9", 0x7d}, {&(0x7f00000002c0)="66d3c64ff84160669f12460c0d210ffb24d9ec496abcdd037bdb59a7cc9be16dc73e822682330ef5211961f321d944b08d61c500cda9e414f4e80edd84a663ed50737914e62c3b5b00758c95d4ffa1687f60cbf97b0f255cc4587e9760f59886b6a94c1da58611f38c5ec3863d1715", 0x6f}, {&(0x7f0000000100)="4a4e02616fac99687ae34678d9e3e1d2d1f26eed5a867014a5e0ef0eaa238cd9b81fd5c67d", 0x25}, {&(0x7f0000000340)="6ae977d1411948c1e7642e7a8d211ec4552abf2cbf1e92331354aa72d3e6736433cb2f911a684e15cf1062f8144dc7a950304df39dc78c79a8cb459ca122f3b7c347b99179", 0x45}, {&(0x7f0000000240)="28b41c", 0x3}, {&(0x7f00000003c0)="2f3db65c1ff543d209a36c5ba48f8370b8fef399b0450960a1c73b51d88dc2d01f7283c13a1020dd78eef72f53a4eb6faa835661a961a01b21ce0b0c428e5af26f356575268ccd55ec84ba287668b87850814cc39eaeff6f44e774444c50140f860a392baea8dee64694e5ca973b72678ba880f26784963019cd5237c2d1be9a0e6f7308b15a1eae5ad14addd83ecf26dfb67cb44f79ffe866902522a7984e44498c75b47c9d34e1f4a52c6b70aff21e2c6e3691f186d191a48ae82eba8f745b70655dd311e2b162449b990fb7fc474e04bed1190b6a0f", 0xd7}, {&(0x7f00000004c0)="38eb56b56b7003336229216dc73e83079512da0c34b4ec5edac0d9e370647d1e1ec1228f09dc", 0x26}, {&(0x7f0000000500)="ac8e3a873b868a554a24ca891956e492c9f3c2927f07ea8fe9cf742192672be30d820376e34dc8b93a00b7b24e4e", 0x2e}], 0x9, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x44, 0x40094}], 0x1, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x7ffe)
syz_open_pts(r3, 0x80000)
syz_open_dev$mouse(0x0, 0x0, 0x200000200004)

03:03:51 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef9})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02")

[  873.419584][T23070] binder: 23061:23070 ioctl c0306201 20000440 returned -22
[  873.448113][T23070] binder: 23061:23070 ioctl c0306201 200002c0 returned -14
03:03:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x1, 0xfffffffffffffc01}]}, 0xc, 0x1)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  873.505052][T23144] binder_alloc: binder_alloc_mmap_handler: 23061 20001000-20004000 already mapped failed -16
[  873.534136][T23070] binder: BINDER_SET_CONTEXT_MGR already set
03:03:51 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20)

[  873.595907][T23070] binder: 23061:23070 ioctl 40046207 0 returned -16
[  873.629509][T23186] binder: 23061:23186 unknown command 536871040
[  873.646950][T23186] binder: 23061:23186 ioctl c0306201 20000440 returned -22
[  873.674377][ T5064] binder: unexpected work type, 4, not freed
03:03:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6000000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  873.778091][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  873.814019][ T5064] binder: undelivered transaction 3321, process died.
03:03:51 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02")

[  873.889214][T23399] binder: 23391:23399 unknown command 536871040
[  873.934797][T23401] binder: 23391:23401 ioctl c0306201 200002c0 returned -14
[  873.961983][T23399] binder: 23391:23399 ioctl c0306201 20000440 returned -22
[  874.051181][T23401] binder_alloc: binder_alloc_mmap_handler: 23391 20001000-20004000 already mapped failed -16
[  874.072301][T23399] binder: BINDER_SET_CONTEXT_MGR already set
[  874.085175][T23401] binder: 23391:23401 unknown command 536871040
[  874.089728][T23399] binder: 23391:23399 ioctl 40046207 0 returned -16
[  874.117787][T23401] binder: 23391:23401 ioctl c0306201 20000440 returned -22
[  874.132249][ T5064] binder: unexpected work type, 4, not freed
[  874.143400][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  874.163827][ T5064] binder: undelivered transaction 3325, process died.
03:03:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x500, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0xfffffffffffffc6d)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={<r2=>0x0}, &(0x7f0000000300)=0xc)
getpgrp(r2)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="0f20e06635000002000f22e00f9350f20f232e0f47f5baf80c66b8c8a2558a66efbafc0c66ed0f35b85c000f00d0baf80c66b8fe65f68066efbafc0ced66b9870a000066b8d95f902966baf1a568110f300f231b"}], 0xaaaaaaaaaaaad03, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0xb983, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000280)=0x4)

03:03:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:52 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x49cc, 0x10002010400aa})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02")

03:03:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6800000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  874.291586][T23435] binder: 23434:23435 unknown command 536871040
[  874.299759][T23435] binder: 23434:23435 ioctl c0306201 20000440 returned -22
03:03:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x80, 0x80000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={<r1=>0x0, 0x33, "5eeeb492a1881512594b4e91446fdbde3ccc72e8b36ba7056f35c95f84728d03484c8d036e74be70dd43e19b334d668319a139"}, &(0x7f0000000100)=0x3b)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r1, 0x39, "39524e0913969b13ab6c8f27c3091e44a84536fb7bfaa828f8ae18e858c33a566e907d65efce8b297c958931092d691d4f1cd29c0aab914e32"}, &(0x7f0000000240)=0x41)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x3f, 0x480000)

03:03:52 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x25d0adea, 0x0, 0x80000006, 0x0, 0x8, 0x0, 0x1c6})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02")

[  874.377977][T23509] binder: 23434:23509 ioctl c0306201 200002c0 returned -14
03:03:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  874.475645][T23509] binder_alloc: binder_alloc_mmap_handler: 23434 20001000-20004000 already mapped failed -16
03:03:52 executing program 1:

[  874.548027][T23435] binder: BINDER_SET_CONTEXT_MGR already set
[  874.591527][T23538] binder: 23434:23538 unknown command 536871040
[  874.627949][T23435] binder: 23434:23435 ioctl 40046207 0 returned -16
[  874.649658][T23538] binder: 23434:23538 ioctl c0306201 20000440 returned -22
[  874.668239][ T7897] binder: undelivered transaction 3329, process died.
[  874.697304][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:52 executing program 1:

03:03:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x6c00000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x2, 0x8300)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x9, 0x8, 0x1, 0x7fffffff, 0xd80, 0x80000000, 0x2, 0x1}})
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  874.875405][T23646] binder: 23643:23646 unknown command 536871040
[  874.915052][T23646] binder: 23643:23646 ioctl c0306201 20000440 returned -22
[  874.967457][T23649] binder: 23643:23649 ioctl c0306201 200002c0 returned -14
[  874.993312][T23649] binder_alloc: binder_alloc_mmap_handler: 23643 20001000-20004000 already mapped failed -16
[  875.005044][T23646] binder: BINDER_SET_CONTEXT_MGR already set
[  875.012527][T23649] binder: 23643:23649 unknown command 536871040
[  875.020506][T23646] binder: 23643:23646 ioctl 40046207 0 returned -16
[  875.031940][T23649] binder: 23643:23649 ioctl c0306201 20000440 returned -22
[  875.048824][ T5064] binder: unexpected work type, 4, not freed
[  875.056444][T23646] binder_alloc: 23643: binder_alloc_buf, no vma
[  875.064342][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  875.071483][ T5064] binder: undelivered transaction 3333, process died.
[  875.080137][T23646] binder: 23643:23646 transaction failed 29189/-3, size 24-8 line 3147
[  875.089858][T23646] binder: 23643:23646 ioctl c0306201 200002c0 returned -14
[  875.097780][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x2, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:53 executing program 1:

03:03:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/24)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
getdents(r0, &(0x7f0000000280)=""/170, 0xaa)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$FICLONE(r1, 0x40049409, r1)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7400000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:53 executing program 1:

[  875.221882][T23665] binder: 23658:23665 unknown command 536871040
[  875.257662][T23665] binder: 23658:23665 ioctl c0306201 20000440 returned -22
[  875.292242][T23724] binder: 23658:23724 ioctl c0306201 200002c0 returned -14
03:03:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:53 executing program 1:

[  875.371926][T23724] binder_alloc: binder_alloc_mmap_handler: 23658 20001000-20004000 already mapped failed -16
03:03:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000480)={@loopback, @remote, <r3=>0x0}, &(0x7f00000004c0)=0xc)
r4 = geteuid()
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@local, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x0, 0x4e21, 0x7f, 0xa, 0x20, 0x80, 0x6, r3, r4}, {0x8, 0xbe, 0x3, 0x1, 0xffffffffffffffe0, 0x2, 0x2, 0x9}, {0x7fffffff, 0x6, 0x8, 0xffffffff}, 0x80, 0x6e6bc0, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d2, 0x7f}, 0xa, @in=@local, 0x34ff, 0x3, 0x0, 0x0, 0x100000001, 0x100000001, 0x98}}, 0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000380)="ef811555f4c5239a80b6a2f974362b1dec1e1741bbbcd8002f7bddb892f890e76a1d419769a208b028556f45fda699611f2d9a31bd76d411ec44c588689bb8a77eaba351ea1797353fe2199d0ef149d0dc75583253ad8889198eae379b72f8264eb1544dfefc5d73db08339b3c6bfe4ed1f02f779518c1dd25731341f7739f591cbf8febaf840a3d6e9fcb36d153b437398675f0334bbaebb309129e517ac7057f859ad0", 0xa4)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000340))
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
mq_unlink(&(0x7f0000000140)='morus640-generic\x00')
r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0xb0680, 0x0)
ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000280))
write$P9_RREAD(r5, &(0x7f0000000540)={0xb, 0x75, 0x2}, 0xb)

[  875.445703][T23665] binder: 23658:23665 unknown command 536871040
[  875.446229][T23789] binder: BINDER_SET_CONTEXT_MGR already set
[  875.474121][T23789] binder: 23658:23789 ioctl 40046207 0 returned -16
03:03:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  875.540385][ T7897] binder: unexpected work type, 4, not freed
[  875.546907][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:53 executing program 1:

[  875.590766][T23665] binder: 23658:23665 ioctl c0306201 20000440 returned -22
[  875.621193][ T7897] binder: undelivered transaction 3338, process died.
03:03:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x7a00000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:53 executing program 1:

03:03:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x4, 0x1, &(0x7f0000000000), 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:53 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000280)={<r3=>0x0, 0xfa, "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"}, &(0x7f0000000140)=0x102)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x1000}, 0x8)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:53 executing program 1:

[  875.929507][T24004] binder: 24003:24004 unknown command 536871040
[  875.956702][T24004] binder: 24003:24004 ioctl c0306201 20000440 returned -22
[  875.975185][T24009] binder: 24003:24009 ioctl c0306201 200002c0 returned -14
03:03:53 executing program 1:

[  876.087391][T24009] binder_alloc: binder_alloc_mmap_handler: 24003 20001000-20004000 already mapped failed -16
03:03:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  876.139046][T24121] binder: BINDER_SET_CONTEXT_MGR already set
03:03:54 executing program 1:

[  876.180883][T24122] binder: 24003:24122 unknown command 536871040
03:03:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
ftruncate(r0, 0x9)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2)
write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x80, 0x2, 0x5}}, 0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/98, 0x62, <r2=>0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f0000000340))

[  876.228763][T24122] binder: 24003:24122 ioctl c0306201 20000440 returned -22
[  876.237182][T24004] binder_alloc: 24003: binder_alloc_buf, no vma
[  876.244367][ T7897] binder: unexpected work type, 4, not freed
03:03:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x35a, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:54 executing program 1:

[  876.276137][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  876.295669][T24121] binder: 24003:24121 ioctl 40046207 0 returned -16
[  876.384839][T24004] binder: 24003:24004 transaction failed 29189/-3, size 24-8 line 3147
03:03:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x8000000000000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:54 executing program 1:

03:03:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf00, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  876.449743][T24004] binder: 24003:24004 ioctl c0306201 200002c0 returned -14
[  876.453603][ T7897] binder: undelivered transaction 3342, process died.
[  876.483414][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:54 executing program 1:

03:03:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0xf477, 0x109000)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xe)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0xc0, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
statx(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x864, &(0x7f0000000280))
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000400)={0xfffffffffffffff9, 0x0, [], {0x0, @reserved}})
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:54 executing program 1:

[  876.663298][T24259] binder: 24257:24259 unknown command 536871040
03:03:54 executing program 1:

[  876.724853][T24259] binder: 24257:24259 ioctl c0306201 20000440 returned -22
[  876.724978][T24324] binder: 24257:24324 ioctl c0306201 200002c0 returned -14
[  876.788683][T24324] binder_alloc: binder_alloc_mmap_handler: 24257 20001000-20004000 already mapped failed -16
[  876.818941][T24259] binder: BINDER_SET_CONTEXT_MGR already set
[  876.836361][T24324] binder: 24257:24324 unknown command 536871040
[  876.856926][T24259] binder: 24257:24259 ioctl 40046207 0 returned -16
[  876.894331][ T7897] binder: unexpected work type, 4, not freed
[  876.903694][T24324] binder: 24257:24324 ioctl c0306201 20000440 returned -22
[  876.912608][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  876.947335][ T7897] binder: undelivered transaction 3347, process died.
[  876.969225][    C1] net_ratelimit: 25 callbacks suppressed
[  876.969233][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  876.969397][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  876.976460][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  876.983722][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  876.989286][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  877.008311][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  877.049241][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  877.055874][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:03:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:55 executing program 1:

03:03:55 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xff, 0x10000)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xffefffffff7f0000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  877.295383][T24377] binder: 24376:24377 unknown command 536871040
03:03:55 executing program 1:

[  877.342583][T24377] binder: 24376:24377 ioctl c0306201 20000440 returned -22
[  877.342717][T24388] binder: 24376:24388 ioctl c0306201 200002c0 returned -14
03:03:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x5a03, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:55 executing program 1:

[  877.531126][T24388] binder_alloc: binder_alloc_mmap_handler: 24376 20001000-20004000 already mapped failed -16
[  877.553959][T24388] binder: BINDER_SET_CONTEXT_MGR already set
03:03:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0xe, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x101000, 0x0)
setsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f0000000300)=0xfff, 0x4)
waitid(0x0, r2, &(0x7f0000000280), 0x0, 0x0)
bind(r0, &(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x1}}, 0x80)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  877.582894][T24491] binder: 24376:24491 unknown command 536871040
[  877.620476][ T5064] binder: unexpected work type, 4, not freed
03:03:55 executing program 1:

[  877.633317][T24377] binder_alloc: 24376: binder_alloc_buf, no vma
[  877.641664][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  877.686718][T24388] binder: 24376:24388 ioctl 40046207 0 returned -16
[  877.694167][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  877.694223][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  877.759365][T24377] binder: 24376:24377 transaction failed 29189/-3, size 24-8 line 3147
03:03:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  877.808034][T24491] binder: 24376:24491 ioctl c0306201 20000440 returned -22
03:03:55 executing program 1:

[  877.866706][T24377] binder: 24376:24377 ioctl c0306201 200002c0 returned -14
[  877.918431][ T5064] binder: undelivered transaction 3351, process died.
[  877.938527][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xffffffff00000000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e20, @local}], 0x58)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:56 executing program 1:

[  878.197682][T24715] binder: 24710:24715 unknown command 536871040
[  878.234635][T24715] binder: 24710:24715 ioctl c0306201 20000440 returned -22
03:03:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  878.242749][T24723] binder: 24710:24723 ioctl c0306201 200002c0 returned -14
03:03:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x2000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:56 executing program 1:

[  878.345824][T24723] binder_alloc: binder_alloc_mmap_handler: 24710 20001000-20004000 already mapped failed -16
03:03:56 executing program 1:

[  878.440166][T24715] binder: 24710:24715 unknown command 536871040
[  878.478682][T24715] binder: 24710:24715 ioctl c0306201 20000440 returned -22
[  878.524638][ T5064] binder: unexpected work type, 4, not freed
[  878.534497][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:03:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:03:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0xffffffffff600000, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  878.575810][ T5064] binder: undelivered transaction 3356, process died.
03:03:56 executing program 1:

03:03:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xffffffffffffffe1, @dev={0xfe, 0x80, [], 0x20}}], 0x1c)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:56 executing program 1:

[  878.760246][T24847] binder: 24844:24847 unknown command 536871040
[  878.767430][T24847] binder: 24844:24847 ioctl c0306201 20000440 returned -22
[  878.777063][T24847] binder: 24844:24847 ioctl c0306201 200002c0 returned -14
[  878.787624][T24848] binder_alloc: binder_alloc_mmap_handler: 24844 20001000-20004000 already mapped failed -16
[  878.839903][T24862] Unknown ioctl -2146937281
[  878.844247][T24847] binder: BINDER_SET_CONTEXT_MGR already set
03:03:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb3cd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  878.887373][T24847] binder: 24844:24847 ioctl 40046207 0 returned -16
[  878.939413][T24905] binder: 24844:24905 unknown command 536871040
[  878.946640][T24905] binder: 24844:24905 ioctl c0306201 20000440 returned -22
03:03:56 executing program 1:

[  878.994179][T24847] binder_alloc: 24844: binder_alloc_buf, no vma
[  878.996761][ T5064] binder: unexpected work type, 4, not freed
[  879.008587][T24847] binder: 24844:24847 transaction failed 29189/-3, size 24-8 line 3147
[  879.009568][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  879.026765][T24847] binder: 24844:24847 ioctl c0306201 200002c0 returned -14
03:03:56 executing program 1:

[  879.052066][ T5064] binder: undelivered transaction 3360, process died.
[  879.091315][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:03:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x2}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  879.138347][T24963] Unknown ioctl -2146937281
03:03:57 executing program 1:

03:03:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="cd277737ca1e6e91ca0770d205efea4643b8a9518eb0a4a1df1eae892b0cd117c7804c490abebc0da16741b43934", 0x2e}, {&(0x7f0000000280)="c32ca8a00f37e72d8b7dcb44ae35a3ae8115479ec37ea127f26a9488a3027eb40937ee845f363f8681f2c85d6c68aa882b29ecb7178f6566cce6d5ed17a18334cbb3773c4b7d3088c02c1befa57856eedf380e109319b5359a5ed22e8883c060bddae5efee01c6c754b1ce704ce7c49aff6203b9db9c5dc2e05e6e5c3eae12a1333104145d883a87640c7d14216f5dbab69281ce9dad9a613d70544730e8aaae086f9b6e5656174f8d4011", 0xab}, {&(0x7f0000000180)="b34f51a48e9305365f81dd91056b6a2c4c08d5ce82efd81814fdeef847477c8bf5e725148faac52c89b2b5fc13c7f402", 0x30}, {&(0x7f0000000340)="779beb1ae7ec57b190badc3546fbfa325cfc58a34f2d65aa7fd430adc3716d816577c271bc5442726ab2d78d005113585331070202bd92b4c15c26806c310bbc8f6d4632bf5e257e5630027e11301ee0a2c47f5558166c1f48f2d69a5290421dfdfaecd63db57650c5e47956c5091b27737cf1ee41ea9c101c769f3633a62e80668c83e5e5cde45eeddb697d140b74669969858b88d23bf69fadb64f08a8fd73d21e4dbeb0b1b6b29f73bb59304976882255a1ee96b7480b7ceaa440f37ba137a0991bff719b92e55992bb47884db03bf7367e66e584bea094a9dca08fc1fdaa6ec897f79f998ee082658f92b58e0674adb076ab8ed1ed626cfbdb", 0xfb}, {&(0x7f0000000440)}, {&(0x7f0000000480)='BV', 0x2}], 0x6, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x5)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0xfffffffffffffc79}}], 0x1, 0x0, 0x0)

[  879.232085][T24970] binder: 24969:24970 unknown command 536871040
[  879.270397][T24970] binder: 24969:24970 ioctl c0306201 20000440 returned -22
03:03:57 executing program 1:

[  879.310714][T24993] binder: 24969:24993 ioctl c0306201 200002c0 returned -14
[  879.363679][T24993] binder_alloc: binder_alloc_mmap_handler: 24969 20001000-20004000 already mapped failed -16
03:03:57 executing program 1:

03:03:57 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000400)={<r4=>0x0, @in={{0x2, 0x4e21, @local}}, 0x200, 0x101, 0x2, 0x38, 0x5ca0}, &(0x7f00000004c0)=0x98)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e21, @empty}}, [0x2, 0x4, 0x9485, 0x0, 0x8, 0x0, 0xea, 0x4, 0x1c0000000, 0x7, 0x2ec, 0x2, 0x2, 0x5, 0x449]}, &(0x7f0000000500)=0x100)
r5 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r6 = socket(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000340)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'sh\x00', 0x8, 0x8000, 0x27}, 0x2c)
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x42000, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000540)={0x40, "51876bdc8d1806e4c92079d7158ee66823377603e29107e59eb7b00e361060ab", 0x2, 0x1})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)
sendmmsg$alg(r5, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f0000000580)=0x3f)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)

[  879.410838][T24970] binder: BINDER_SET_CONTEXT_MGR already set
[  879.435364][T24970] binder: 24969:24970 ioctl 40046207 0 returned -16
03:03:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  879.475845][T25085] binder: 24969:25085 unknown command 536871040
[  879.515332][T24993] binder_alloc: 24969: binder_alloc_buf, no vma
[  879.548137][ T7897] binder: unexpected work type, 4, not freed
[  879.556767][ T7897] binder: undelivered TRANSACTION_COMPLETE
[  879.574131][T25090] IPVS: set_ctl: invalid protocol: 0 172.30.0.6:20004
[  879.584310][T24993] binder: 24969:24993 transaction failed 29189/-3, size 24-8 line 3147
[  879.605115][ T7897] binder: undelivered transaction 3365, process died.
[  879.626834][T25085] binder: 24969:25085 ioctl c0306201 20000440 returned -22
03:03:57 executing program 4:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/187)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:03:57 executing program 1:

[  879.669936][T24993] binder: 24969:24993 ioctl c0306201 200002c0 returned -14
[  879.699830][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
[  879.705922][T25101] Unknown ioctl 8839
03:03:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x3}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  879.796789][T25201] binder: 25197:25201 unknown command 536871040
[  879.818634][T25201] binder: 25197:25201 ioctl c0306201 20000440 returned -22
[  879.837707][T25201] binder: 25197:25201 ioctl c0306201 200002c0 returned -14
03:03:57 executing program 1:

[  879.853524][T25204] binder_alloc: binder_alloc_mmap_handler: 25197 20001000-20004000 already mapped failed -16
[  879.888815][T25101] IPVS: set_ctl: invalid protocol: 0 172.30.0.6:20004
03:03:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x5a030000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  879.913559][T25101] Unknown ioctl 8839
[  879.928791][T25201] binder: BINDER_SET_CONTEXT_MGR already set
[  879.939515][T25201] binder: 25197:25201 ioctl 40046207 0 returned -16
03:03:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x80002)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0, 0xfe81}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:03:57 executing program 1:

[  879.966686][T25211] binder: 25197:25211 unknown command 536871040
03:03:57 executing program 1:

[  880.058451][ T5064] binder: unexpected work type, 4, not freed
[  880.067325][T25211] binder: 25197:25211 ioctl c0306201 20000440 returned -22
[  880.089733][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  880.132314][ T5064] binder: undelivered transaction 3370, process died.
03:03:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x5}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:58 executing program 1:

03:03:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  880.338129][T25327] binder: 25326:25327 unknown command 536871040
[  880.415488][T25327] binder: 25326:25327 ioctl c0306201 20000440 returned -22
[  880.476368][T25330] binder: 25326:25330 ioctl c0306201 200002c0 returned -14
[  880.537020][T25330] binder_alloc: binder_alloc_mmap_handler: 25326 20001000-20004000 already mapped failed -16
[  880.582118][T25327] binder: BINDER_SET_CONTEXT_MGR already set
03:03:58 executing program 4:
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3}, 0x28, 0x2)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x40, 0x8000)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xfff, 0x0, 0x8, 0x5, 0x4, 0x9, 0x100, {<r1=>0x0, @in6={{0xa, 0x4e24, 0x2, @local, 0xfffffffffffffe01}}, 0x7, 0x1000, 0x7ff, 0xd5d, 0xd3d9}}, &(0x7f0000000100)=0xb0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x6}, &(0x7f0000000300)=0x8)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000340)={"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"})
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)

[  880.647017][T25327] binder: 25326:25327 ioctl 40046207 0 returned -16
03:03:58 executing program 1:

03:03:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  880.690006][T25439] binder: 25326:25439 unknown command 536871040
[  880.696475][T25439] binder: 25326:25439 ioctl c0306201 20000440 returned -22
03:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

03:03:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x8dffffff, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  880.816696][ T7897] binder: undelivered transaction 3374, process died.
03:03:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x6}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:03:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000300)={0xfffffffffffeffff, 0x5, 0x7f})
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=<r3=>0x0)
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0xa, &(0x7f0000000280)={0x3a, 0x100000001})
syz_open_dev$sndmidi(&(0x7f0000000440)='/dev/snd/midiC#D#\x00', 0x20, 0x100)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
renameat(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000003c0))
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  880.873984][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:03:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  880.984276][T25603] binder: 25589:25603 unknown command 536871040
[  881.033194][T25603] binder: 25589:25603 ioctl c0306201 20000440 returned -22
[  881.033306][T25658] binder: 25589:25658 ioctl c0306201 200002c0 returned -14
03:03:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf0ffffff, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:03:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
clone(0x2003102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0)

03:03:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f0000000180)={r1, r2+10000000}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
gettid()
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  881.216360][T25658] binder_alloc: binder_alloc_mmap_handler: 25589 20001000-20004000 already mapped failed -16
03:03:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  881.280353][T25603] binder: BINDER_SET_CONTEXT_MGR already set
[  881.313711][T25603] binder: 25589:25603 ioctl 40046207 0 returned -16
[  881.330241][T25833] binder: 25589:25833 unknown command 536871040
[  881.336567][T25833] binder: 25589:25833 ioctl c0306201 20000440 returned -22
03:03:59 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000040)=0x7fff, 0x4)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000fff000/0x1000)=nil)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
mknodat(r1, &(0x7f0000000080)='./file0\x00', 0xe280, 0x5)

03:03:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xffffff8d, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  881.428979][T25603] binder_alloc: 25589: binder_alloc_buf, no vma
[  881.429587][ T5064] binder: unexpected work type, 4, not freed
[  881.460029][T25603] binder: 25589:25603 transaction failed 29189/-3, size 24-8 line 3147
[  881.475397][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  881.502845][ T5064] binder: undelivered transaction 3378, process died.
[  881.544632][T25603] binder: 25589:25603 ioctl c0306201 200002c0 returned -14
03:03:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  881.587194][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:03:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x7}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  881.759328][T25994] binder: 25993:25994 unknown command 536871040
[  881.765630][T25994] binder: 25993:25994 ioctl c0306201 20000440 returned -22
03:03:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  881.800754][T25994] binder: 25993:25994 ioctl c0306201 200002c0 returned -14
[  881.836821][T26072] binder_alloc: binder_alloc_mmap_handler: 25993 20001000-20004000 already mapped failed -16
03:03:59 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000080)={{0x3, 0x8}, 'port1\x00', 0x10, 0x1, 0x4, 0x1, 0xff, 0x3, 0x1000, 0x0, 0x2, 0x5})

03:03:59 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c0754ddea420fae9972b571112d02")
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffeff8000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10007})

03:03:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xfffffff0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  881.943676][T25994] binder: BINDER_SET_CONTEXT_MGR already set
[  881.961671][T25994] binder: 25993:25994 ioctl 40046207 0 returned -16
[  881.978452][T26125] binder: 25993:26125 unknown command 536871040
03:03:59 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000010000af})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02")

03:03:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  882.036183][ T5064] binder: unexpected work type, 4, not freed
[  882.044087][T26125] binder: 25993:26125 ioctl c0306201 20000440 returned -22
[  882.056869][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  882.075527][ T5064] binder: undelivered transaction 3383, process died.
03:04:00 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r3 = dup(r0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000000))
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={<r4=>0x0, 0x80000, r3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={r4, 0x80000, r1})

03:04:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x12}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:04:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x200000000000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x11, 0x0, 0x13, 0x0, 0x203})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c0754ddea420fae9972b571112d02")

[  882.243508][T26278] binder: 26277:26278 unknown command 536871040
[  882.281049][T26278] binder: 26277:26278 ioctl c0306201 20000440 returned -22
03:04:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140))
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x3, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80800)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_retries\x00\xb5\xe6V\x1ct\x15l\xdb\xa2E\xf9\x8d\x8f\x19\xaa\xe3\x83J\xe8\xdf^\x9d1P\xc6\xb0G\xa3\xda\xce\x90\x15\xec?\xf5\x95C\xc8\xc1/\x1e\x8d\xc3\xcer=', 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
sendmsg$nl_generic(r4, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRESOCT, @ANYRES64=r3], @ANYRESDEC=r7, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESHEX=r3, @ANYPTR, @ANYRESDEC=0x0, @ANYRES16=r6, @ANYPTR, @ANYRESDEC=r5], @ANYRES16=r4], @ANYRESHEX=r3], 0x2}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
bind$inet(r5, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c)
r8 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r8, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="000000000000ea7f0300781246fc25090800000000000000e78ea50928b0cc6d8219ba4ea84a000000a52f000076816892709a088dfe2093e4119bc8d5c494a808000000000000000000004d47115e2066094e3dbcbad0eda942650688ed7bd0f11dbee12c2c8af2c1adc505f3f1847267a78a5e4eb829ddccad1246352c8db7a895126c6d2bae0576414160b8b7137f05cc4c151f137b3dcda5d0db5319d057ff6071db6c89e9192de08357141bcfda0f32dc099a121c07eb8a40a5f0ea4fa10c005acb4604d13422c66e918ec15425b3548f56bd7dd71d58a5536c5b1ff7b894e1960addbbab44dd3fa72f4b9d49392170fbdd02f13006edc37e4028b79d56fb316517befd"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14)
dup2(r5, r8)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2})
socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00'}, &(0x7f0000000a00)=0xffffffffffffffe2)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fcntl$notify(r9, 0x402, 0x80000008)
fcntl$notify(r9, 0x402, 0x13)
exit(0x3)

[  882.308082][T26320] binder: 26277:26320 ioctl c0306201 200002c0 returned -14
03:04:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xfffffff0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  882.371452][T26320] binder_alloc: binder_alloc_mmap_handler: 26277 20001000-20004000 already mapped failed -16
[  882.394805][T26278] binder: BINDER_SET_CONTEXT_MGR already set
03:04:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  882.420290][T26320] binder: 26277:26320 unknown command 536871040
[  882.471987][T26278] binder: 26277:26278 ioctl 40046207 0 returned -16
[  882.487826][ T7897] binder: undelivered transaction 3387, process died.
[  882.504351][T26320] binder: 26277:26320 ioctl c0306201 20000440 returned -22
[  882.522808][ T7897] binder: undelivered TRANSACTION_COMPLETE
03:04:00 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

03:04:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x50}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

03:04:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:00 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000080)={{0x3, 0x8}, 'port1\x00', 0x10, 0x1, 0x4, 0x1, 0xff, 0x3, 0x1000, 0x0, 0x2, 0x5})

[  882.781776][T26456] binder: 26455:26456 unknown command 536871040
[  882.799277][T26456] binder: 26455:26456 ioctl c0306201 20000440 returned -22
[  882.815982][T26456] binder: 26455:26456 ioctl c0306201 200002c0 returned -14
03:04:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf00000000000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  882.844153][T26492] binder_alloc: binder_alloc_mmap_handler: 26455 20001000-20004000 already mapped failed -16
[  882.872401][T26456] binder: BINDER_SET_CONTEXT_MGR already set
[  882.880191][T26492] binder: 26455:26492 unknown command 536871040
[  882.886632][T26456] binder: 26455:26456 ioctl 40046207 0 returned -16
[  882.899889][T26492] binder: 26455:26492 ioctl c0306201 20000440 returned -22
[  882.920380][ T5064] binder: unexpected work type, 4, not freed
[  882.927511][ T5064] binder: undelivered TRANSACTION_COMPLETE
03:04:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x5000}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0})

[  882.947247][ T5064] binder: undelivered transaction 3391, process died.
[  883.035831][T26672] binder: 26671:26672 unknown command 536871040
[  883.048398][T26672] binder: 26671:26672 ioctl c0306201 20000440 returned -22
[  883.057980][T26672] binder: 26671:26672 ioctl c0306201 200002c0 returned -14
[  883.067884][T26676] binder_alloc: binder_alloc_mmap_handler: 26671 20001000-20004000 already mapped failed -16
[  883.079666][T26672] binder: BINDER_SET_CONTEXT_MGR already set
03:04:00 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000080)={{0x3, 0x8}, 'port1\x00', 0x10, 0x1, 0x4, 0x1, 0xff, 0x3, 0x1000, 0x0, 0x2, 0x5})

[  883.085961][T26676] binder: 26671:26676 unknown command 536871040
[  883.092915][T26672] binder: 26671:26672 ioctl 40046207 0 returned -16
[  883.106714][T26676] binder: 26671:26676 ioctl c0306201 20000440 returned -22
[  883.122562][T26672] binder_alloc: 26671: binder_alloc_buf, no vma
[  883.134245][ T5064] binder: unexpected work type, 4, not freed
[  883.141372][T26672] binder: 26671:26672 transaction failed 29189/-3, size 24-8 line 3147
[  883.150555][ T5064] binder: undelivered TRANSACTION_COMPLETE
[  883.156660][ T5064] binder: undelivered transaction 3395, process died.
[  883.164133][T26672] binder: 26671:26672 ioctl c0306201 200002c0 returned -14
[  883.173081][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:04:01 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f00000002c0)=0xc)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x210400, 0x0)
fchown(r0, r3, r4)
open$dir(&(0x7f0000000340)='./file0\x00', 0x2, 0x4)
write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000300)=@req3={0x3, 0x1f, 0x3, 0xffffffff7fffffff, 0x8, 0x1, 0x4}, 0x1c)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  883.209214][    C1] net_ratelimit: 25 callbacks suppressed
[  883.209221][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  883.209249][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  883.215031][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  883.232357][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  883.238154][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:04:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  883.289322][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  883.295455][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:04:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0xffffffffffff93a1, 0x0)

03:04:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:01 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x1ba, 0x0)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000080)={{0x3, 0x8}, 'port1\x00', 0x10, 0x1, 0x4, 0x1, 0xff, 0x3, 0x1000, 0x0, 0x2, 0x5})

[  883.398873][T26888] binder: 26887:26888 unknown command 536871040
[  883.463829][T26888] binder: 26887:26888 ioctl c0306201 20000440 returned -22
[  883.494215][T26895] binder: 26887:26895 got transaction with invalid offset (2, min 0 max 24) or object.
03:04:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0, 0x255}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  883.555148][T26895] binder: 26887:26895 transaction failed 29201/-22, size 24-8 line 3241
[  883.579870][T26895] binder: 26887:26895 ioctl c0306201 200002c0 returned -14
03:04:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140))
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x3, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80800)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_retries\x00\xb5\xe6V\x1ct\x15l\xdb\xa2E\xf9\x8d\x8f\x19\xaa\xe3\x83J\xe8\xdf^\x9d1P\xc6\xb0G\xa3\xda\xce\x90\x15\xec?\xf5\x95C\xc8\xc1/\x1e\x8d\xc3\xcer=', 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
sendmsg$nl_generic(r4, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRESOCT, @ANYRES64=r3], @ANYRESDEC=r7, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESHEX=r3, @ANYPTR, @ANYRESDEC=0x0, @ANYRES16=r6, @ANYPTR, @ANYRESDEC=r5], @ANYRES16=r4], @ANYRESHEX=r3], 0x2}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
bind$inet(r5, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c)
r8 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r8, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14)
dup2(r5, r8)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2})
socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00'}, &(0x7f0000000a00)=0xffffffffffffffe2)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fcntl$notify(r9, 0x402, 0x80000008)
fcntl$notify(r9, 0x402, 0x13)
exit(0x3)

[  883.632165][T26895] binder_alloc: binder_alloc_mmap_handler: 26887 20001000-20004000 already mapped failed -16
[  883.665696][T26888] binder: BINDER_SET_CONTEXT_MGR already set
[  883.665709][T26895] binder: 26887:26895 unknown command 536871040
03:04:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  883.665733][T26895] binder: 26887:26895 ioctl c0306201 20000440 returned -22
[  883.721669][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
[  883.728073][T26888] binder: 26887:26888 ioctl 40046207 0 returned -16
03:04:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x5a03000000000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:01 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$addseals(r0, 0x409, 0x8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200), 0x0, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={<r4=>0x0, 0x94, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, @in6={0xa, 0x4e24, 0x79a, @dev={0xfe, 0x80, [], 0x27}, 0x3}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e24, @rand_addr=0x5}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}, 0x1ff}]}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000003c0)={r4, 0xb2, "f4748e4e5e1cf2eb0d0e356a0b31db22089fc5b3d03fecace5f489f58d83ccead6d2235794dd46d6ca5b0028f2690b5437222c347fe2ed0982f01d4132c1ce90d5fceede0ab2c04e5a9400e51682eb82d8413156388c270a38e50df9d9fc04d94e9a05151f7f3a1d5b3c39f4c192b9c6d7921ac791df21c0864edcf550d0b4ef29cec51abca931c734b50bb31be08aed75546324328c08dbb5a09663d99e6bba710838f367ccd7ca9161dbd38e0a3cd00dc4"}, &(0x7f0000000240)=0xba)
ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000280)="0f8a7f8d1d9e7b1473d5dd356dcdf65440a6b83ba7fec2adc1d9500a67f725ca6ad88093ac5ee01bc011d8b2495efb5934272719dfcace235ab0f93176a692e7db98973e")
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:04:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x3]}}}], 0xe4, 0x0, 0x0})

[  883.913022][T27284] binder: 27263:27284 unknown command 536871040
[  883.930060][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  883.936687][T27284] binder: 27263:27284 ioctl c0306201 20000440 returned -22
[  883.936951][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  883.951946][    C0] protocol 88fb is buggy, dev hsr_slave_0
03:04:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140))
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x3, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80800)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_retries\x00\xb5\xe6V\x1ct\x15l\xdb\xa2E\xf9\x8d\x8f\x19\xaa\xe3\x83J\xe8\xdf^\x9d1P\xc6\xb0G\xa3\xda\xce\x90\x15\xec?\xf5\x95C\xc8\xc1/\x1e\x8d\xc3\xcer=', 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
sendmsg$nl_generic(r4, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRESOCT, @ANYRES64=r3], @ANYRESDEC=r7, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESHEX=r3, @ANYPTR, @ANYRESDEC=0x0, @ANYRES16=r6, @ANYPTR, @ANYRESDEC=r5], @ANYRES16=r4], @ANYRESHEX=r3], 0x2}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
bind$inet(r5, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c)
r8 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r8, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14)
dup2(r5, r8)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2})
socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00'}, &(0x7f0000000a00)=0xffffffffffffffe2)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fcntl$notify(r9, 0x402, 0x80000008)
fcntl$notify(r9, 0x402, 0x13)
exit(0x3)

[  883.964573][T27326] binder: 27263:27326 got transaction with invalid offset (3, min 0 max 24) or object.
[  883.995744][T27326] binder: 27263:27326 transaction failed 29201/-22, size 24-8 line 3241
[  884.017907][T27326] binder: 27263:27326 ioctl c0306201 200002c0 returned -14
[  884.073013][T27326] binder_alloc: binder_alloc_mmap_handler: 27263 20001000-20004000 already mapped failed -16
[  884.091884][T27284] binder: BINDER_SET_CONTEXT_MGR already set
[  884.102863][T27326] binder: 27263:27326 unknown command 536871040
[  884.115008][T27284] binder: 27263:27284 ioctl 40046207 0 returned -16
[  884.129714][T27326] binder: 27263:27326 ioctl c0306201 20000440 returned -22
[  884.147752][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
03:04:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x4]}}}], 0xe4, 0x0, 0x0})

[  884.268787][T27485] binder: 27480:27485 unknown command 536871040
03:04:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)

03:04:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  884.327105][T27485] binder: 27480:27485 ioctl c0306201 20000440 returned -22
[  884.327611][T27540] binder: 27480:27540 got transaction with invalid offset (4, min 0 max 24) or object.
03:04:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140))
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x3, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80800)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_retries\x00\xb5\xe6V\x1ct\x15l\xdb\xa2E\xf9\x8d\x8f\x19\xaa\xe3\x83J\xe8\xdf^\x9d1P\xc6\xb0G\xa3\xda\xce\x90\x15\xec?\xf5\x95C\xc8\xc1/\x1e\x8d\xc3\xcer=', 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
sendmsg$nl_generic(r4, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRESOCT, @ANYRES64=r3], @ANYRESDEC=r7, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESHEX=r3, @ANYPTR, @ANYRESDEC=0x0, @ANYRES16=r6, @ANYPTR, @ANYRESDEC=r5], @ANYRES16=r4], @ANYRESHEX=r3], 0x2}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
bind$inet(r5, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c)
r8 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r8, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14)
dup2(r5, r8)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2})
socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00'}, &(0x7f0000000a00)=0xffffffffffffffe2)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fcntl$notify(r9, 0x402, 0x80000008)
fcntl$notify(r9, 0x402, 0x13)
exit(0x3)

03:04:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x8dffffff00000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  884.440936][T27540] binder: 27480:27540 transaction failed 29201/-22, size 24-8 line 3241
[  884.450590][T27540] binder: 27480:27540 ioctl c0306201 200002c0 returned -14
[  884.472879][T27485] binder_alloc: binder_alloc_mmap_handler: 27480 20001000-20004000 already mapped failed -16
03:04:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  884.509084][T27540] binder: 27480:27540 unknown command 536871040
[  884.545638][T27485] binder: BINDER_SET_CONTEXT_MGR already set
[  884.564801][T27540] binder: 27480:27540 ioctl c0306201 20000440 returned -22
[  884.590009][T27485] binder: 27480:27485 ioctl 40046207 0 returned -16
[  884.590106][ T5064] binder: undelivered TRANSACTION_ERROR: 29201
03:04:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x5]}}}], 0xe4, 0x0, 0x0})

03:04:02 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0xffffff3d, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
clock_getres(0x3, &(0x7f0000000280))
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x21, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000300)={0xc00000, 0x8, 0x5, 0x1, <r5=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r5, 0x8, 0x30}, &(0x7f00000003c0)=0xc)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f0000000180)={0x3, 0x1, 0x3, 0x7, 0x10000})

03:04:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  884.770683][T27765] binder: 27764:27765 unknown command 536871040
[  884.823524][T27765] binder: 27764:27765 ioctl c0306201 20000440 returned -22
[  884.823612][T27769] binder: 27764:27769 got transaction with invalid offset (5, min 0 max 24) or object.
03:04:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x10000, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{}]})
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  884.935817][T27769] binder: 27764:27769 transaction failed 29201/-22, size 24-8 line 3241
[  884.958140][T27769] binder: 27764:27769 ioctl c0306201 200002c0 returned -14
03:04:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  885.001411][T27769] binder_alloc: binder_alloc_mmap_handler: 27764 20001000-20004000 already mapped failed -16
03:04:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf0ffffff00000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  885.043741][T27769] binder: BINDER_SET_CONTEXT_MGR already set
[  885.066575][T27879] binder: 27764:27879 unknown command 536871040
[  885.078176][T27769] binder: 27764:27769 ioctl 40046207 0 returned -16
03:04:03 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x4, 'syz0\x00'})
open(&(0x7f0000000100)='./file0\x00', 0x10600, 0x31)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
syz_open_dev$mouse(0x0, 0x1ba, 0x0)

[  885.110304][T27765] binder_alloc: 27764: binder_alloc_buf, no vma
[  885.141387][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
[  885.150443][T27879] binder: 27764:27879 ioctl c0306201 20000440 returned -22
03:04:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  885.207089][T27765] binder: 27764:27765 transaction failed 29189/-3, size 24-8 line 3147
[  885.242415][T27765] binder: 27764:27765 ioctl c0306201 200002c0 returned -14
03:04:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x6]}}}], 0xe4, 0x0, 0x0})

[  885.256504][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:04:03 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0xffffff3d, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
clock_getres(0x3, &(0x7f0000000280))
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x21, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000300)={0xc00000, 0x8, 0x5, 0x1, <r5=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r5, 0x8, 0x30}, &(0x7f00000003c0)=0xc)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f0000000180)={0x3, 0x1, 0x3, 0x7, 0x10000})

03:04:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  885.372148][T28044] binder: 28029:28044 unknown command 536871040
[  885.406194][T28044] binder: 28029:28044 ioctl c0306201 20000440 returned -22
03:04:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:03 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0xffffff3d, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
clock_getres(0x3, &(0x7f0000000280))
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x21, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000300)={0xc00000, 0x8, 0x5, 0x1, <r5=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r5, 0x8, 0x30}, &(0x7f00000003c0)=0xc)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f0000000180)={0x3, 0x1, 0x3, 0x7, 0x10000})

[  885.464644][T28044] binder: 28029:28044 got transaction with invalid offset (6, min 0 max 24) or object.
03:04:03 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f00000003c0), 0x80800)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x10, r2, 0x80000000)
setsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000140)=0x7fff, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000004c0)=0x6, 0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
getsockopt$inet_dccp_int(r2, 0x21, 0x5, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r3 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r4 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x1, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000280)={<r5=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x100000000, 0xe7b0, 0x7fff, 0x7f, 0x3ff, 0x7, 0x7, 0x1, 0x1186, 0x100, 0xfff, 0x8, 0x7a3b360d, 0x20, 0x80]}, &(0x7f0000000180)=0x100)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000380)=r5, 0x4)
fcntl$getownex(r1, 0x10, &(0x7f0000000500)={0x0, <r6=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r6, r0, 0x0, 0x2, &(0x7f0000000540)='^\x00'}, 0x30)
recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000440)={0x8, 0x2, {0x3, 0x3, 0x8, 0x3, 0x2}})

[  885.576621][T28044] binder: 28029:28044 transaction failed 29201/-22, size 24-8 line 3241
03:04:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x1, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000440)={0x8, 0x81, 0x286, 0x1f, 0xffff})
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x101040, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="059f82fe903a38121f6841989b68ffbaac9ebe6573997adde6fdc4608297fb79c238a37b067ae9f3564c88a256235f776aa6226e98e83362312d77fc53f68ca160702511272979fe3337b7154310025ee942fcb2f5040dcb760b5a7ef61f8a24c47a2d8493f4178ff80bdd9f9714fc3e41591082693178e365e47f642c0224680e21dcfdb5bf652c4e54a3d41ea1914434b048fb87706d2c9f847e66c6", @ANYRES16=r4, @ANYBLOB="040826bd70000000000841000000100018000000066574683a6c6f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f00000006c0)={"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"})
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @local}, 0x10)
r5 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000140)={0x4, 0x0, 0x8001, 0xff, '\x00', 0x8000})
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf0ffffff00000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  885.661499][T28044] binder: 28029:28044 ioctl c0306201 200002c0 returned -14
03:04:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  885.724587][T28218] binder_alloc: binder_alloc_mmap_handler: 28029 20001000-20004000 already mapped failed -16
03:04:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  885.795425][T28044] binder: BINDER_SET_CONTEXT_MGR already set
[  885.851185][T28044] binder: 28029:28044 ioctl 40046207 0 returned -16
[  885.904303][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
03:04:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x7]}}}], 0xe4, 0x0, 0x0})

03:04:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={<r2=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={r2})
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

03:04:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  886.135375][T28390] binder: 28384:28390 unknown command 536871040
[  886.163632][T28392] binder: BINDER_SET_CONTEXT_MGR already set
[  886.190919][T28390] binder: 28384:28390 ioctl c0306201 20000440 returned -22
[  886.238230][T28392] binder: 28376:28392 ioctl 40046207 0 returned -16
[  886.239255][T28419] binder: 28384:28419 got transaction with invalid offset (2, min 0 max 24) or object.
[  886.289052][T28424] binder: 28376:28424 unknown command 536871040
[  886.330654][T28436] binder: 28376:28436 got transaction with invalid offset (7, min 0 max 24) or object.
[  886.349329][T28419] binder: 28384:28419 transaction failed 29201/-22, size 24-8 line 3241
[  886.367195][T28419] binder: 28384:28419 ioctl c0306201 200002c0 returned -14
[  886.408724][T28424] binder: 28376:28424 ioctl c0306201 20000440 returned -22
03:04:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  886.482615][T28436] binder: 28376:28436 transaction failed 29201/-22, size 24-8 line 3241
[  886.496660][T28436] binder: 28376:28436 ioctl c0306201 200002c0 returned -14
[  886.544665][T28424] binder_alloc: binder_alloc_mmap_handler: 28376 20001000-20004000 already mapped failed -16
[  886.585346][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
[  886.646580][T28392] binder: BINDER_SET_CONTEXT_MGR already set
[  886.646611][T28424] binder: 28376:28424 unknown command 536871040
03:04:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

03:04:04 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x101000, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
r5 = dup2(r2, r0)
ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0186415, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x69, 0x1, 0x10, &(0x7f0000ffd000/0x1000)=nil, 0x7fff})

[  886.792666][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
[  886.801480][T28392] binder: 28376:28392 ioctl 40046207 0 returned -16
[  886.825768][T28605] binder: 28604:28605 unknown command 536871040
03:04:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf0ffffff00000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x8]}}}], 0xe4, 0x0, 0x0})

03:04:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)
arch_prctl$ARCH_SET_GS(0x1001, 0x80000000)
bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0084320, &(0x7f0000000140)={0x5, &(0x7f00000003c0)="cc50d0ab8e9292ccdb81c031c63adc8f8d2095d3d0fee95529faf1c62e94a21dfb71ffb406c0d52abc53724dbf77822aef1fd35706cdd4ce2eead535b6abfc918a8458cff3cd1a37445d5eb6646c96bb2778052e82f136a9430fe21bd4ef8d31782e8caedcdca9366f605bf8378439b05d636b8b5826d13c8e4ae7501a349127e4320c3f684f881e16925ace0aa9db4c08756fb828c1549baed11e90bb22b90fc514699f344dc0528ffd7037319d30b08401fe3536752ce4"})

[  886.851922][T28424] binder: 28376:28424 ioctl c0306201 20000440 returned -22
[  886.871115][T28659] binder: 28604:28659 got transaction with invalid offset (2, min 0 max 24) or object.
03:04:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  886.978682][T28659] binder: 28604:28659 transaction failed 29201/-22, size 24-8 line 3241
[  887.014271][T28605] binder: 28604:28605 ioctl c0306201 20000440 returned -22
[  887.014311][T28670] binder: BINDER_SET_CONTEXT_MGR already set
[  887.040326][T28659] binder: 28604:28659 ioctl c0306201 200002c0 returned -14
[  887.089355][T28670] binder: 28668:28670 ioctl 40046207 0 returned -16
[  887.099587][T28727] binder: 28668:28727 unknown command 536871040
03:04:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  887.191217][T28727] binder: 28668:28727 ioctl c0306201 20000440 returned -22
[  887.191326][T28670] binder: 28668:28670 got transaction with invalid offset (8, min 0 max 24) or object.
[  887.228796][ T5064] binder: undelivered TRANSACTION_ERROR: 29201
03:04:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:04:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  887.426034][T28884] binder: 28883:28884 unknown command 536871040
[  887.432697][T28670] binder: 28668:28670 transaction failed 29201/-22, size 24-8 line 3241
[  887.463875][T28670] binder: 28668:28670 ioctl c0306201 200002c0 returned -14
[  887.475179][T28884] binder: 28883:28884 ioctl c0306201 20000440 returned -22
[  887.485632][T28886] binder: 28883:28886 got transaction with invalid offset (2, min 0 max 24) or object.
[  887.522094][T28727] binder_alloc: binder_alloc_mmap_handler: 28668 20001000-20004000 already mapped failed -16
[  887.562660][T28886] binder: 28883:28886 transaction failed 29201/-22, size 24-8 line 3241
[  887.578508][T28670] binder: BINDER_SET_CONTEXT_MGR already set
[  887.598450][T28727] binder: 28668:28727 unknown command 536871040
03:04:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0xf0ffffff00000000, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:05 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x1)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x140, r4, 0xb00, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffc0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc5bd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5fe8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000140))
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x800)

[  887.607881][T28886] binder: 28883:28886 ioctl c0306201 200002c0 returned -14
[  887.622655][T28670] binder: 28668:28670 ioctl 40046207 0 returned -16
[  887.640160][T28727] binder: 28668:28727 ioctl c0306201 20000440 returned -22
03:04:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  887.682156][ T5064] binder: undelivered TRANSACTION_ERROR: 29201
[  887.683106][T28989] binder: 28668:28989 transaction failed 29201/-22, size 24-8 line 3241
[  887.706965][ T5064] binder: undelivered TRANSACTION_ERROR: 29201
03:04:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  887.802496][T28989] binder: 28668:28989 ioctl c0306201 200002c0 returned -14
[  887.833683][T29009] binder: 29008:29009 transaction failed 29201/-22, size 24-8 line 3241
[  887.843118][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
03:04:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x48]}}}], 0xe4, 0x0, 0x0})

[  887.888480][T29009] binder: 29008:29009 ioctl c0306201 200002c0 returned -14
[  887.939548][ T7897] binder: undelivered TRANSACTION_ERROR: 29201
[  887.942515][T29162] binder: BINDER_SET_CONTEXT_MGR already set
03:04:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

03:04:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="cda05ee85dbd5f680838d9042ae6b8e7d7fae0467f79c2ec6bc7df641853d4b930a4834cbf109481518b8e74118647bb4307f249a83d1ecf578b787e77c384cec9bf7f0852425f2bb62be35f86428a185b8acadacee3a451aebacfab5c2ab96f2c6d1fd5a4ad0dac12b7158a3a7fa61a62c501dae213268a4f5469b75e16b3ad010dd3efb1f393b27ce63824da78b109fb70c73a70c851b94319597cfb023077c3082f6377ce04e441bb7ce6286a49c283320cf36f9530aad242c739b315281f3abe014a0324ba1173f7a6362a3f3b8d7efd88ea9830f112344bffa8e98eb964de657d58f2305f415e4cc011d79d0f8e2ea4da44b5248e697cd92275119560114753dfdd8ef6801cb280526e82925dd734899251cef6b4486e4ea62646c5ae5537a13c08cc38103edb9c9da387e47065bd8f9a6e92b0188bc879c03ccd1b921d9e0d1905b2a58e93fb3daf8f439eb15353c634063d1bf7c42c6d76c43dbcf4bcaf7f6c52e06cb29f858ece419d059ca5d7496efac3cb20aadc133201b2bacecc0445a651ac1b38b514c50bb3817ece08b673a065f5ec6a71cdb621f1f18b7c6e90d58599c5a3484badd72df1c881934d4ec2fe73eb309fc6df50ae2a8e822277c27a78ccd2e4a948d657d74162badc456d0e1f577046a4c650e411209f934a4f9782d7aa4479569c69828dcba4bff7acec88bbcccfabaa852f1a2eeb60c4bbd97843ea597a8537cc6b2b777b5c4ebc4e10fd18e83ba065811ddc9a5695aed0f26d87ce9ce56e4fa71654ca4e9f8a56bcf0ee9fe1cd98f7a46ffa4d26b587075103822a2df6129c89ccfc9cdd8d42a69743499a05938306d9315169eafc806d7ff3b1ae91c49c84fffd0671a0aaf6a4ccb68fc6eccca3591e6664f2e69571becd4a5b952e0a584d71356b884487f97512d3f68e4e8ecbea90408c438377064d97c8367cf3a85418209cb016a8337ca4d7f95aaf547c6af4f6057c83891b81f1bfba6d98a221f8ddb17df4dbe9a9349c843dc3555ae0f86ef89d3f0f36571667dd5240fdd04a03f820ad8909ec98509c46c05ebc4872963299b5c3ff88ced537bab41beb329bd390eb41ac005756a9873e0c84365aefaa2f0a0f32652b90856df60c12481c0df5b2d878c413c596d13c4ef0f67267ccd78083f216fcb3dd59ee34216e4691122dda56f1300b24c3c51536f5dec7df51857b1863ee", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140))

[  887.999887][T29206] binder: 29161:29206 unknown command 536871040
[  888.000369][T29162] binder: 29161:29162 ioctl 40046207 0 returned -16
[  888.024869][T29206] binder: 29161:29206 ioctl c0306201 20000440 returned -22
[  888.033786][T29208] binder: 29207:29208 transaction failed 29189/-22, size 24-8 line 2994
03:04:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  888.050438][T29208] binder: 29207:29208 ioctl c0306201 200002c0 returned -14
[  888.071729][T29211] binder: 29161:29211 transaction failed 29189/-22, size 24-8 line 2994
[  888.098600][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:04:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

03:04:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  888.195069][T29211] binder: 29161:29211 ioctl c0306201 200002c0 returned -14
03:04:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x4, 0x9, 0x5, 'queue0\x00', 0x4})
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

[  888.294413][T29206] binder_alloc: binder_alloc_mmap_handler: 29161 20001000-20004000 already mapped failed -16
[  888.319051][T29274] binder: 29240:29274 transaction failed 29189/-22, size 24-8 line 2994
[  888.353850][T29206] binder: 29161:29206 unknown command 536871040
[  888.370991][T29274] binder: 29240:29274 ioctl c0306201 200002c0 returned -14
[  888.390718][T29206] binder: 29161:29206 ioctl c0306201 20000440 returned -22
[  888.400600][T29162] binder_alloc: 29161: binder_alloc_buf, no vma
03:04:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x10000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x2c}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000395, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000500)=0x400000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={<r3=>0x0, @in6={{0xa, 0x4e21, 0xffffffff00000000, @loopback, 0x2e}}, 0x5, 0xffff, 0x100, 0x6, 0x20}, &(0x7f0000000340)=0x98)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r3}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0)=r3, 0x4)
bind$alg(r4, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000004c0)={0x7f, 0x2, 0x3, 0xd4c3, 0x7378, 0x10000})
umount2(&(0x7f0000000140)='./file0\x00', 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0xca02d0b3a58a4eca, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r5}}, 0xffffffffffffff1d)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r6 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r6, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  888.431703][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
[  888.467179][ T5064] binder: undelivered TRANSACTION_ERROR: 29189
03:04:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140))

03:04:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  888.475431][T29162] binder: 29161:29162 transaction failed 29189/-3, size 24-8 line 3147
03:04:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  888.590559][T29162] binder: 29161:29162 ioctl c0306201 200002c0 returned -14
[  888.598038][ T7897] binder: undelivered TRANSACTION_ERROR: 29189
03:04:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273000000006c"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x4c]}}}], 0xe4, 0x0, 0x0})

[  888.681133][T29390] binder: 29389:29390 ioctl c0306201 200002c0 returned -14
03:04:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140))

03:04:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000140)=[{}, {}]})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000300), 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  888.757658][T29546] binder: 29534:29546 unknown command 536871040
[  888.791338][T29546] binder: 29534:29546 ioctl c0306201 20000440 returned -22
03:04:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  888.849960][T29553] ------------[ cut here ]------------
[  888.855477][T29553] kernel BUG at drivers/android/binder_alloc.c:1141!
[  888.882381][T29558] binder: BINDER_SET_CONTEXT_MGR already set
[  888.918147][T29558] binder: 29557:29558 ioctl 40046207 0 returned -16
[  888.951846][T29553] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  888.957968][T29553] CPU: 1 PID: 29553 Comm: syz-executor.3 Not tainted 5.1.0-rc2+ #41
[  888.965992][T29553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.976072][T29553] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510
[  888.982758][T29553] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 4f f4 23 fc 4c 89 e6 4c 89 ef e8 64 f5 23 fc 4d 39 e5 76 07 e8 3a f4 23 fc <0f> 0b e8 33 f4 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 41
[  889.002399][T29553] RSP: 0018:ffff888057baf6d8 EFLAGS: 00010216
[  889.008479][T29553] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000c64b000
[  889.016459][T29553] RDX: 00000000000003ca RSI: ffffffff854c7d46 RDI: 0000000000000006
[  889.017147][T29558] binder_transaction: 2 callbacks suppressed
[  889.017159][T29558] binder: 29557:29558 got transaction with invalid offset (2, min 0 max 24) or object.
[  889.024447][T29553] RBP: ffff888057baf758 R08: ffff88809221e4c0 R09: 0000000000000028
[  889.024455][T29553] R10: ffffed100af75f32 R11: ffff888057baf997 R12: 0000000000000020
[  889.024463][T29553] R13: 0000000000000028 R14: ffff88805fc24250 R15: 0000000000000000
[  889.024473][T29553] FS:  0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:00000000f5d7eb40
[  889.024481][T29553] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  889.024489][T29553] CR2: 0000000030e23000 CR3: 00000000854e8000 CR4: 00000000001406e0
[  889.024499][T29553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  889.024506][T29553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  889.024510][T29553] Call Trace:
[  889.024534][T29553]  ? memcpy+0x46/0x50
[  889.024561][T29553]  binder_alloc_copy_from_buffer+0x37/0x42
[  889.042007][T29558] binder: 29557:29558 ioctl c0306201 200002c0 returned -14
[  889.048142][T29553]  binder_get_object+0xc3/0x200
[  889.048162][T29553]  binder_transaction+0x2b4a/0x6690
[  889.048188][T29553]  ? binder_thread_read+0x3d50/0x3d50
[  889.089748][ T3876] kobject: 'loop5' (00000000f0d278ea): kobject_uevent_env
[  889.095850][T29553]  ? __lock_acquire+0x548/0x3fb0
[  889.129211][ T3876] kobject: 'loop5' (00000000f0d278ea): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  889.134278][T29553]  ? __might_fault+0x12b/0x1e0
[  889.146783][ T3876] kobject: 'loop1' (00000000dfcd409a): kobject_uevent_env
[  889.151686][T29553]  ? lock_downgrade+0x880/0x880
[  889.151708][T29553]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  889.151724][T29553]  ? _copy_from_user+0xdd/0x150
[  889.151745][T29553]  binder_thread_write+0x87e/0x2820
[  889.151766][T29553]  ? binder_transaction+0x6690/0x6690
[  889.164661][ T3876] kobject: 'loop1' (00000000dfcd409a): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  889.166714][T29553]  ? __might_fault+0x12b/0x1e0
[  889.178665][ T3876] kobject: 'loop4' (00000000b88e7877): kobject_uevent_env
[  889.184931][T29553]  ? lock_downgrade+0x880/0x880
[  889.184952][T29553]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  889.184968][T29553]  ? _copy_from_user+0xdd/0x150
[  889.184988][T29553]  binder_ioctl+0x1033/0x183b
[  889.185007][T29553]  ? binder_thread_write+0x2820/0x2820
[  889.185034][T29553]  ? __fget+0x381/0x550
[  889.201823][ T3876] kobject: 'loop4' (00000000b88e7877): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  889.210716][T29553]  ? ksys_dup3+0x3e0/0x3e0
03:04:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x35a}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000180)={0xf002, 0x100000, 0xffffffffffffffff, 0x81, 0x9bf})
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x68, 0x800, 0x2000000000000000, 0x0, 0x0, 0x0, "8d120a5dcc6f01387d6cb8e85b0375cafd2e6d25fbc9f55758238c59be37df36a6f109113a6512c21906506b14a252d8451d344902edf195e4a3849ee1bbf2b5727f9fb6ae4ac482563aea5777187f6d8d9912f12a8db5b566aa404b4aa6bc97efd94ce000a5d663"}, 0x180)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, <r3=>0x0})
ptrace$getregs(0xc, r3, 0x6, &(0x7f00000002c0)=""/110)
openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

03:04:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

03:04:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

03:04:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@generic={0x3, 0xffff, 0x5d10})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x771, 0x2000)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000180)=0x6603)
sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x240088c4)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0)

[  889.210731][T29553]  ? get_old_timespec32+0x200/0x200
[  889.210749][T29553]  ? tomoyo_file_ioctl+0x23/0x30
[  889.210763][T29553]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  889.210779][T29553]  ? security_file_ioctl+0x93/0xc0
[  889.210804][T29553]  ? binder_thread_write+0x2820/0x2820
[  889.210822][T29553]  __ia32_compat_sys_ioctl+0x197/0x620
[  889.210848][T29553]  do_fast_syscall_32+0x281/0xc98
[  889.219741][ T3876] kobject: 'loop0' (000000003c0d41b7): kobject_uevent_env
[  889.222738][T29553]  entry_SYSENTER_compat+0x70/0x7f
[  889.227601][ T3876] kobject: 'loop0' (000000003c0d41b7): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  889.233825][T29553] RIP: 0023:0xf7fa3869
[  889.233842][T29553] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  889.233848][T29553] RSP: 002b:00000000f5d7e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  889.233859][T29553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[  889.233866][T29553] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000
[  889.233873][T29553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  889.233880][T29553] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  889.233886][T29553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  889.233898][T29553] Modules linked in:
[  889.237755][T29553] ---[ end trace fd55a385760a7593 ]---
[  889.423736][T29702] binder: 29589:29702 got transaction with invalid offset (2, min 0 max 24) or object.
[  889.442212][T29702] binder: 29589:29702 ioctl c0306201 200002c0 returned -14
[  889.449571][    C1] net_ratelimit: 23 callbacks suppressed
[  889.449579][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  889.449619][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  889.449678][    C1] protocol 88fb is buggy, dev hsr_slave_0
03:04:07 executing program 4:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  889.449708][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  889.450680][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  889.467863][T29553] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510
[  889.473313][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  889.478507][T29553] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 4f f4 23 fc 4c 89 e6 4c 89 ef e8 64 f5 23 fc 4d 39 e5 76 07 e8 3a f4 23 fc <0f> 0b e8 33 f4 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 41
[  889.478523][T29553] RSP: 0018:ffff888057baf6d8 EFLAGS: 00010216
[  889.522759][ T3876] kobject: 'loop4' (00000000b88e7877): kobject_uevent_env
[  889.529985][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  889.535772][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  889.542240][ T3876] kobject: 'loop4' (00000000b88e7877): fill_kobj_path: path = '/devices/virtual/block/loop4'
03:04:07 executing program 4:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  889.611576][T29736] binder: BINDER_SET_CONTEXT_MGR already set
03:04:07 executing program 4:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

03:04:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x2]}}}], 0xe4, 0x0, 0x0})

[  889.757199][ T3876] kobject: 'loop4' (00000000b88e7877): kobject_uevent_env
[  889.769519][ T3876] kobject: 'loop4' (00000000b88e7877): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  889.818958][T29553] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000c64b000
[  889.820345][ T3876] kobject: 'loop1' (00000000dfcd409a): kobject_uevent_env
[  889.845534][T29553] RDX: 00000000000003ca RSI: ffffffff854c7d46 RDI: 0000000000000006
[  889.853671][T29553] RBP: ffff888057baf758 R08: ffff88809221e4c0 R09: 0000000000000028
[  889.860111][T29788] binder: BINDER_SET_CONTEXT_MGR already set
[  889.861813][T29553] R10: ffffed100af75f32 R11: ffff888057baf997 R12: 0000000000000020
[  889.873911][T29736] binder: 29534:29736 ioctl 40046207 0 returned -16
[  889.878236][T29553] R13: 0000000000000028 R14: ffff88805fc24250 R15: 0000000000000000
[  889.888448][T29788] binder: 29787:29788 ioctl 40046207 0 returned -16
[  889.892661][T29553] FS:  0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5d7eb40
[  889.899390][ T3876] kobject: 'loop1' (00000000dfcd409a): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  889.908172][T29553] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  889.924652][ T3876] kobject: 'loop5' (00000000f0d278ea): kobject_uevent_env
[  889.925197][T29553] CR2: 00000000024e77d0 CR3: 00000000854e8000 CR4: 00000000001406f0
[  889.936848][ T3876] kobject: 'loop5' (00000000f0d278ea): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  889.940073][T29553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  889.952018][ T3876] kobject: 'loop2' (0000000095867320): kobject_uevent_env
[  889.958255][T29553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  889.965798][ T3876] kobject: 'loop2' (0000000095867320): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  889.976027][T29553] Kernel panic - not syncing: Fatal exception
[  889.986657][ T3876] kobject: 'loop0' (000000003c0d41b7): kobject_uevent_env
[  889.990703][T29553] Kernel Offset: disabled
[  890.002235][T29553] Rebooting in 86400 seconds..