{0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:00 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:00 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:00 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:00 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:00 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:00 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:00 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:01 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:01 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:01 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:01 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:01 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:01 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:01 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r1, 0x0) 00:03:01 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:01 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:01 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:01 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:01 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:01 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r1, 0x0) 00:03:01 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:01 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:01 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:01 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:02 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:02 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:02 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:02 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:02 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:02 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:02 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 3: r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:02 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:02 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:02 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:03:02 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:02 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 3: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 3: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 3: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:03 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:03 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) 00:03:03 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:03 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:03 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:03 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) 00:03:03 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:03 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, 0x0, 0x0) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) msgget$private(0x0, 0x50) 00:03:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) msgget$private(0x0, 0x50) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, 0x0, 0x0) 00:03:04 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 00:03:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:04 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) msgget$private(0x0, 0x50) 00:03:04 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, 0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) msgget$private(0x0, 0x50) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) msgget$private(0x0, 0x50) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 3: msgget$private(0x0, 0x50) 00:03:05 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 3: msgget$private(0x0, 0x0) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 5: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 5: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:05 executing program 5: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:05 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:05 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:06 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:06 executing program 5: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:06 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 5: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:06 executing program 4: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 5: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:06 executing program 4: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:07 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) [ 187.402633][ T2151] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.404131][ T2151] ieee802154 phy1 wpan1: encryption failed: -22 00:03:07 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:07 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:07 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:07 executing program 4: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:07 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:07 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:07 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:07 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:07 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:07 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:07 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:07 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(0xffffffffffffffff, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:08 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:08 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, 0x0, 0x0) 00:03:08 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:08 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, 0x0, 0x0) 00:03:08 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000009880)={0x0, 0x0, 0x0}, 0x8884) read$FUSE(r0, 0x0, 0x0) 00:03:08 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:08 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:08 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:08 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:09 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:09 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:09 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) msgctl$IPC_RMID(0x0, 0x0) 00:03:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:09 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgrcv(r2, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:10 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:10 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:10 executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:10 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgrcv(r2, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:11 executing program 2: msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:11 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgrcv(r2, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:11 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:11 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:11 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:11 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = msgget$private(0x0, 0x4) msgrcv(r1, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:12 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:12 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgrcv(r2, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:12 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:12 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:12 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:13 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 0: syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:13 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = msgget$private(0x0, 0x4) msgrcv(r1, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:13 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = msgget$private(0x0, 0x4) msgrcv(r1, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:13 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) 00:03:13 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) 00:03:13 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) 00:03:13 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgrcv(r2, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:13 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:13 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:14 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:14 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:14 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:14 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:15 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:15 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:15 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:15 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:15 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) 00:03:15 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:15 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:16 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:16 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) 00:03:16 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:16 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:16 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:16 executing program 1: r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:16 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:16 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:16 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:16 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:16 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:16 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:17 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:17 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:17 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:17 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:17 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:17 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:17 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:17 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:17 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:17 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:17 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:17 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:17 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:17 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:17 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 1: msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:18 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:18 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:18 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:18 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:18 executing program 1: msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:18 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:18 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 1: msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:18 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:18 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) 00:03:18 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:18 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:18 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:18 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:18 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:19 executing program 3: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:19 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:19 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:19 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:19 executing program 3: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:19 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 00:03:19 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:19 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:19 executing program 3: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:19 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:19 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:19 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:19 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:19 executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:19 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:19 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:19 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) 00:03:20 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 00:03:20 executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:20 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:20 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:20 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:20 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) msgget$private(0x0, 0x50) 00:03:20 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:20 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) msgget$private(0x0, 0x50) 00:03:20 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:20 executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:20 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:20 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:21 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 00:03:21 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:21 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) msgget$private(0x0, 0x50) 00:03:21 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:21 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:21 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:21 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) msgget$private(0x0, 0x50) 00:03:21 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:21 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:21 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:21 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) msgget$private(0x0, 0x50) 00:03:21 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:22 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:22 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) msgget$private(0x0, 0x50) 00:03:22 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) msgget$private(0x0, 0x50) 00:03:22 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 2: msgget$private(0x0, 0x50) 00:03:22 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:22 executing program 2: msgget$private(0x0, 0x0) 00:03:22 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:22 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) msgget$private(0x0, 0x50) 00:03:22 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:22 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:22 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:22 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:22 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:22 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:22 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:22 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:22 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:22 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:22 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:22 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:22 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:22 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:23 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 00:03:23 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) msgget$private(0x0, 0x50) 00:03:23 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) msgget$private(0x0, 0x50) 00:03:23 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:23 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:23 executing program 5: syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:23 executing program 5: syz_open_dev$cec(0x0, 0x1, 0x2) 00:03:23 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 5: syz_open_dev$cec(0x0, 0x1, 0x2) 00:03:23 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:23 executing program 5: syz_open_dev$cec(0x0, 0x1, 0x2) 00:03:23 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:23 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:23 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:23 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:23 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:23 executing program 5: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0x2020) openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:23 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) 00:03:23 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) write$FUSE_BMAP(r4, &(0x7f0000004280)={0x18, 0x0, r3, {0x1}}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000009880)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009840)={&(0x7f0000008640)={0x11e8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a306990fed15225ce03572de3aa40fa676c2b2a0ec268e78c124b2bf2f9373d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a939fa983582eef1b8b499204ef431c5783fbca1534d2b5aedc6d840463afada"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe5a}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private0, 0x7fffffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b81d512e9e0a3041858d1a2d1ef2b32bba3b3636bedf31a1547baf81c4924bcc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a035f51c25782ecbd1ab8d1d0e05afe8cba682e04f8e6751be46122d8605f59"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0d0c8dabc1c148d80618f4e3874b33c05448061a545c826b3748ce6fee5f086"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c09167668536f3af5cb744599a552853881ce1e5f6ca354f8034ae21b44764"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast1, 0xffffffff}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @local, 0x23b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "507a93056b546356db5d4e2ec3f760af9a7bb34363eb701a3fc46dfc31a2da92"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ad04477d046c364e59b5122a583783c548e0d19cc148bce7e3586bc4b602200"}]}]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) read$FUSE(r0, &(0x7f0000009a80)={0x2020}, 0x2020) 00:03:23 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000a40), 0x8) 00:03:23 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000a40), 0x8) 00:03:24 executing program 5: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 00:03:24 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/185, 0xb9}], &(0x7f00000004c0)=[0x7, 0x3, 0xfffffffffffffff8, 0x800, 0x8, 0xc000000000000000, 0x101, 0x8001]}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000005c0)=r4, 0x1) r6 = io_uring_setup(0x1f4d, &(0x7f0000000600)={0x0, 0xfa73, 0x40, 0x3, 0x2ae}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/119, 0x77}], 0x3) 00:03:24 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000a40), 0x8) 00:03:24 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/185, 0xb9}], &(0x7f00000004c0)=[0x7, 0x3, 0xfffffffffffffff8, 0x800, 0x8, 0xc000000000000000, 0x101, 0x8001]}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000005c0)=r4, 0x1) r6 = io_uring_setup(0x1f4d, &(0x7f0000000600)={0x0, 0xfa73, 0x40, 0x3, 0x2ae}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/119, 0x77}], 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000a, 0x20010, r5, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/125, 0x7d}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/33, 0x21}], 0x8) 00:03:24 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r7, &(0x7f0000000a40), 0x8) 00:03:24 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r7, &(0x7f0000000a40), 0x8) 00:03:24 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:24 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:24 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000a40), 0x8) 00:03:24 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r7, &(0x7f0000000a40), 0x8) 00:03:24 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r7, &(0x7f0000000a40), 0x8) 00:03:24 executing program 0: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:24 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:24 executing program 0: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000a40), 0x8) 00:03:24 executing program 0: ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:24 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) write$FUSE_BMAP(r4, &(0x7f0000004280)={0x18, 0x0, r3, {0x1}}, 0x18) read$FUSE(r2, &(0x7f00000042c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000006300)={0x10, 0xfffffffffffffff5, r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000006440)={&(0x7f0000006340), 0xc, &(0x7f0000006400)={&(0x7f00000063c0)={0x34, 0x0, 0x204, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000006480), &(0x7f00000064c0)=0x14) read$FUSE(r4, &(0x7f0000006500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000008540)={0x30, 0x0, r7, [{0x1, 0x7, 0x8, 0x1, ':.%-@,)}'}]}, 0x30) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f000000bd00)={&(0x7f000000bb00)={0x10, 0x0, 0x0, 0x11418091}, 0xc, &(0x7f000000bcc0)={&(0x7f000000bb80)={0x124, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4bc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5d8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x44a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3e0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8ea8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000010}, 0x4000) 00:03:25 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/185, 0xb9}], &(0x7f00000004c0)=[0x7, 0x3, 0xfffffffffffffff8, 0x800, 0x8, 0xc000000000000000, 0x101, 0x8001]}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000005c0)=r4, 0x1) r6 = io_uring_setup(0x1f4d, &(0x7f0000000600)={0x0, 0xfa73, 0x40, 0x3, 0x2ae}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/119, 0x77}], 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000a, 0x20010, r5, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/125, 0x7d}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/33, 0x21}], 0x8) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000003b40)=[{0x5, 0xe5cf0f575eed215f, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000e80)=""/126, 0x7e}, {&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/239, 0xef}, {&(0x7f00000010c0)=""/4096, 0x1000}], &(0x7f0000002140)=[0x1, 0x1ff, 0x10000, 0x20]}, {0x3, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/176, 0xb0}, {&(0x7f0000002240)=""/178, 0xb2}, {&(0x7f0000002300)=""/131, 0x83}], &(0x7f0000002400)=[0x2, 0x2, 0x0]}, {0x6, 0x1, 0x0, &(0x7f0000003880)=[{&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/138, 0x8a}, {&(0x7f00000025c0)=""/148, 0x94}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/198, 0xc6}, {&(0x7f0000003780)=""/228, 0xe4}], &(0x7f0000003900)=[0x0, 0x7f, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003940)}, {&(0x7f0000003980)=""/32, 0x20}, {&(0x7f00000039c0)=""/9, 0x9}, {&(0x7f0000003a00)=""/15, 0xf}, {&(0x7f0000003a40)=""/59, 0x3b}], &(0x7f0000003b00)=[0x6, 0xff, 0xffffffffffffff2e, 0x4, 0xa9, 0x1ff, 0x7fffffff]}], 0x4) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000003bc0)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) 00:03:25 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:25 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44840) read$usbfs(r0, &(0x7f0000000980)=""/53, 0x35) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r7, &(0x7f0000000a40), 0x8) 00:03:25 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:25 executing program 0: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:25 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/185, 0xb9}], &(0x7f00000004c0)=[0x7, 0x3, 0xfffffffffffffff8, 0x800, 0x8, 0xc000000000000000, 0x101, 0x8001]}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000005c0)=r4, 0x1) r6 = io_uring_setup(0x1f4d, &(0x7f0000000600)={0x0, 0xfa73, 0x40, 0x3, 0x2ae}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/119, 0x77}], 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000a, 0x20010, r5, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/125, 0x7d}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/33, 0x21}], 0x8) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000003b40)=[{0x5, 0xe5cf0f575eed215f, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000e80)=""/126, 0x7e}, {&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/239, 0xef}, {&(0x7f00000010c0)=""/4096, 0x1000}], &(0x7f0000002140)=[0x1, 0x1ff, 0x10000, 0x20]}, {0x3, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/176, 0xb0}, {&(0x7f0000002240)=""/178, 0xb2}, {&(0x7f0000002300)=""/131, 0x83}], &(0x7f0000002400)=[0x2, 0x2, 0x0]}, {0x6, 0x1, 0x0, &(0x7f0000003880)=[{&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/138, 0x8a}, {&(0x7f00000025c0)=""/148, 0x94}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/198, 0xc6}, {&(0x7f0000003780)=""/228, 0xe4}], &(0x7f0000003900)=[0x0, 0x7f, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003940)}, {&(0x7f0000003980)=""/32, 0x20}, {&(0x7f00000039c0)=""/9, 0x9}, {&(0x7f0000003a00)=""/15, 0xf}, {&(0x7f0000003a40)=""/59, 0x3b}], &(0x7f0000003b00)=[0x6, 0xff, 0xffffffffffffff2e, 0x4, 0xa9, 0x1ff, 0x7fffffff]}], 0x4) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000003bc0)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000003c40), r2) 00:03:25 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/185, 0xb9}], &(0x7f00000004c0)=[0x7, 0x3, 0xfffffffffffffff8, 0x800, 0x8, 0xc000000000000000, 0x101, 0x8001]}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000005c0)=r4, 0x1) r6 = io_uring_setup(0x1f4d, &(0x7f0000000600)={0x0, 0xfa73, 0x40, 0x3, 0x2ae}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/119, 0x77}], 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000a, 0x20010, r5, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/125, 0x7d}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/33, 0x21}], 0x8) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000003b40)=[{0x5, 0xe5cf0f575eed215f, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000e80)=""/126, 0x7e}, {&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/239, 0xef}, {&(0x7f00000010c0)=""/4096, 0x1000}], &(0x7f0000002140)=[0x1, 0x1ff, 0x10000, 0x20]}, {0x3, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/176, 0xb0}, {&(0x7f0000002240)=""/178, 0xb2}, {&(0x7f0000002300)=""/131, 0x83}], &(0x7f0000002400)=[0x2, 0x2, 0x0]}, {0x6, 0x1, 0x0, &(0x7f0000003880)=[{&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/138, 0x8a}, {&(0x7f00000025c0)=""/148, 0x94}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/198, 0xc6}, {&(0x7f0000003780)=""/228, 0xe4}], &(0x7f0000003900)=[0x0, 0x7f, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003940)}, {&(0x7f0000003980)=""/32, 0x20}, {&(0x7f00000039c0)=""/9, 0x9}, {&(0x7f0000003a00)=""/15, 0xf}, {&(0x7f0000003a40)=""/59, 0x3b}], &(0x7f0000003b00)=[0x6, 0xff, 0xffffffffffffff2e, 0x4, 0xa9, 0x1ff, 0x7fffffff]}], 0x4) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000003bc0)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) 00:03:25 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:25 executing program 0: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:25 executing program 2: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:25 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x756b, 0x400, 0x2, 0xd4}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x9, 0x20], 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x191100, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000180)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/185, 0xb9}], &(0x7f00000004c0)=[0x7, 0x3, 0xfffffffffffffff8, 0x800, 0x8, 0xc000000000000000, 0x101, 0x8001]}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000005c0)=r4, 0x1) r6 = io_uring_setup(0x1f4d, &(0x7f0000000600)={0x0, 0xfa73, 0x40, 0x3, 0x2ae}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/119, 0x77}], 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000a, 0x20010, r5, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/125, 0x7d}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/33, 0x21}], 0x8) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000003b40)=[{0x5, 0xe5cf0f575eed215f, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000e80)=""/126, 0x7e}, {&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/239, 0xef}, {&(0x7f00000010c0)=""/4096, 0x1000}], &(0x7f0000002140)=[0x1, 0x1ff, 0x10000, 0x20]}, {0x3, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/176, 0xb0}, {&(0x7f0000002240)=""/178, 0xb2}, {&(0x7f0000002300)=""/131, 0x83}], &(0x7f0000002400)=[0x2, 0x2, 0x0]}, {0x6, 0x1, 0x0, &(0x7f0000003880)=[{&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/138, 0x8a}, {&(0x7f00000025c0)=""/148, 0x94}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/198, 0xc6}, {&(0x7f0000003780)=""/228, 0xe4}], &(0x7f0000003900)=[0x0, 0x7f, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003940)}, {&(0x7f0000003980)=""/32, 0x20}, {&(0x7f00000039c0)=""/9, 0x9}, {&(0x7f0000003a00)=""/15, 0xf}, {&(0x7f0000003a40)=""/59, 0x3b}], &(0x7f0000003b00)=[0x6, 0xff, 0xffffffffffffff2e, 0x4, 0xa9, 0x1ff, 0x7fffffff]}], 0x4) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000003bc0)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) 00:03:25 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:25 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:25 executing program 0: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:25 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) write$FUSE_BMAP(r4, &(0x7f0000004280)={0x18, 0x0, r3, {0x1}}, 0x18) read$FUSE(r2, &(0x7f00000042c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000006300)={0x10, 0xfffffffffffffff5, r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000006440)={&(0x7f0000006340), 0xc, &(0x7f0000006400)={&(0x7f00000063c0)={0x34, 0x0, 0x204, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000006480), &(0x7f00000064c0)=0x14) read$FUSE(r4, &(0x7f0000006500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000008540)={0x30, 0x0, r7, [{0x1, 0x7, 0x8, 0x1, ':.%-@,)}'}]}, 0x30) write$FUSE_BMAP(r2, &(0x7f0000008580)={0x18, 0x0, r7, {0x3}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 00:03:25 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44840) read$usbfs(r0, &(0x7f0000000980)=""/53, 0x35) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000a40), 0x8) 00:03:25 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:25 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 00:03:25 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:25 executing program 2: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0xffffffffffffffda, 0x0, {{0xfffffffffffffff7, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0xfffffffffffffffc, 0x7fffffffffffffff, 0x22d, 0x5680000, 0xfffffffffffffff9, 0x8, 0x6, 0x4}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x5}}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) write$FUSE_BMAP(r4, &(0x7f0000004280)={0x18, 0x0, r3, {0x1}}, 0x18) read$FUSE(r2, &(0x7f00000042c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000006300)={0x10, 0xfffffffffffffff5, r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000006440)={&(0x7f0000006340), 0xc, &(0x7f0000006400)={&(0x7f00000063c0)={0x34, 0x0, 0x204, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000006480), &(0x7f00000064c0)=0x14) read$FUSE(r4, &(0x7f0000006500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000008540)={0x30, 0x0, r7, [{0x1, 0x7, 0x8, 0x1, ':.%-@,)}'}]}, 0x30) write$FUSE_BMAP(r2, &(0x7f0000008580)={0x18, 0x0, r7, {0x3}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 00:03:25 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44840) read$usbfs(r0, &(0x7f0000000980)=""/53, 0x35) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000a40), 0x8) 00:03:25 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:25 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:25 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:26 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:26 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) 00:03:26 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:26 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:26 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:26 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:03:26 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:26 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 00:03:26 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:26 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) 00:03:26 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:26 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:26 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:26 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 00:03:26 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) 00:03:26 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:26 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:26 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:26 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:26 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 00:03:26 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 00:03:26 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:27 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) 00:03:27 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) 00:03:27 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:27 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:27 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:27 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:27 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:27 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:27 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:27 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:27 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:28 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:28 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:28 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:28 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:28 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:28 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:28 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:28 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:28 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:28 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:28 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:28 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:28 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) 00:03:28 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:28 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:28 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:28 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:28 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:28 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:28 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:28 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x893, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8095}, 0x40001) 00:03:28 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:28 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:29 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:29 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:29 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:29 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:29 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:29 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:29 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:29 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:29 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:29 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:29 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:29 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:29 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:29 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:29 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:29 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:29 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:29 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:29 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:29 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) 00:03:30 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:30 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:30 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:30 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:30 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:30 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:30 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:30 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:30 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:30 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:30 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:30 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:30 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:30 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:30 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:30 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:30 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:30 executing program 5: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:30 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:30 executing program 5: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 5: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:30 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:30 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:30 executing program 5: syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:31 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:31 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 5: syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:31 executing program 5: syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:31 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) 00:03:31 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:31 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:31 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r1, 0x0) 00:03:31 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:31 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r1, 0x0) 00:03:31 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:31 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:31 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:31 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:31 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:31 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:31 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:31 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:31 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:31 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x0, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:31 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) 00:03:32 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 3: r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:32 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:32 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:03:32 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:32 executing program 3: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:32 executing program 3: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:32 executing program 3: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:32 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgctl$IPC_RMID(0x0, 0x0) 00:03:32 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:32 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:32 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:32 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c"}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:32 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:32 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:32 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgget$private(0x0, 0x4) 00:03:32 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:32 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:32 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r2, 0x0) 00:03:32 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgget$private(0x0, 0x4) 00:03:33 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r1, 0x0) 00:03:33 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:33 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x0) msgget$private(0x0, 0x4) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r1, 0x0) 00:03:33 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) 00:03:33 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:33 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:33 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x0) 00:03:33 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:33 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:33 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) 00:03:33 executing program 4: r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:33 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x0) 00:03:33 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x0) 00:03:33 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:03:33 executing program 4: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:33 executing program 4: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:33 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 4: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 00:03:33 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) 00:03:33 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x0) 00:03:33 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) 00:03:33 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:33 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:34 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) 00:03:34 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:34 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:34 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) 00:03:34 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:34 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:34 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:34 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:34 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:34 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:34 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:35 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:35 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) 00:03:35 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) msgget$private(0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:35 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:35 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:35 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:35 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:35 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) r3 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd=r4, 0x46e5543f, 0x0, 0x8c800000}, 0x69) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:35 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:35 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) r3 = msgget$private(0x0, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2980, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/101}, 0x6d, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20048041) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x61, 0x0, 0x81, 0x2, &(0x7f0000000740)="f7ca109b63149f6ddbce67520818f5d62df2fa4040f59a48c0995e67999f66737c1939f55b19b3b6620569ad34b3d80b4b015f22f492b6480600a6bcf57fcf0020bf828ae33041eb526b01799f6bf470adfb1d8b8c77c40b42bcfc71e84aaf8cda11a889bf5caf67faa020da515eee0c8107049d397b232e63b41b3e46eba52aee560b9911a6f04b42856f123d26752f70cdb8ccaeb1944715c1af25298436bd513a61c4aef003ce952a80e6c574b8e174f2b323211055bee20e9ba7602b3fd118a2d8e6168c32b6a87a6fe0", 0x9, 0x0, 0x1}, 0x8) 00:03:35 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:35 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:03:35 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) 00:03:35 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) msgget$private(0x0, 0x50) 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) 00:03:35 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) [ 215.969946][T25745] list_del corruption. prev->next should be ffff0000c9a4d000, but was ffff0000d6a6b000. (prev=ffff800018a92060) [ 215.973536][T25745] ------------[ cut here ]------------ [ 215.974892][T25745] kernel BUG at lib/list_debug.c:61! [ 215.976250][T25745] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 215.978293][T25745] Modules linked in: 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) [ 215.979295][T25745] CPU: 1 PID: 25745 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0 [ 215.981801][T25745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 215.984416][T25745] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.986529][T25745] pc : __list_del_entry_valid+0x13c/0x158 [ 215.988037][T25745] lr : __list_del_entry_valid+0x13c/0x158 [ 215.989544][T25745] sp : ffff8000237277a0 00:03:35 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x8001, "88a8a491a786886f7e26278c29e8f314d0b3f25684c854feacbb1d7d079b099c", 0x2}) [ 215.990665][T25745] x29: ffff8000237277a0 x28: 1fffe0001aea428f x27: 1fffe0001aea4285 [ 215.992779][T25745] x26: ffff0000d7521428 x25: ffff0000cd7a39c0 x24: 1fffe000193490c1 [ 215.994916][T25745] x23: ffff800018a92060 x22: dfff800000000000 x21: ffff800018a92060 [ 215.997092][T25745] x20: ffff0000c2cd7000 x19: ffff0000c9a4d000 x18: 1fffe00036848fbe [ 215.999217][T25745] x17: ffff800015ead000 x16: ffff80001243078c x15: 0000000000000002 [ 216.001348][T25745] x14: ffff800015eb0570 x13: dfff800000000000 x12: 0000000000000001 [ 216.003413][T25745] x11: 0000000000000000 x10: 0000000000000000 x9 : 926f4d50def15c00 00:03:35 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) [ 216.005474][T25745] x8 : 926f4d50def15c00 x7 : ffff80000828a7b8 x6 : 0000000000000000 [ 216.007622][T25745] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80000aa8e264 [ 216.009688][T25745] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000006d [ 216.011733][T25745] Call trace: [ 216.012559][T25745] __list_del_entry_valid+0x13c/0x158 [ 216.013979][T25745] nfc_llcp_local_put+0x6c/0x1b4 [ 216.015320][T25745] nfc_llcp_unregister_device+0xa4/0x11c [ 216.016783][T25745] nfc_unregister_device+0x150/0x290 [ 216.018151][T25745] nci_unregister_device+0x1dc/0x21c [ 216.019499][T25745] virtual_ncidev_close+0x5c/0xa0 [ 216.020875][T25745] __fput+0x30c/0x7bc [ 216.021976][T25745] ____fput+0x20/0x30 [ 216.023043][T25745] task_work_run+0x230/0x2e0 [ 216.024275][T25745] do_notify_resume+0x2180/0x3c90 [ 216.025631][T25745] el0_svc+0x90/0x15c [ 216.026710][T25745] el0t_64_sync_handler+0x84/0xf0 [ 216.028033][T25745] el0t_64_sync+0x190/0x194 [ 216.029267][T25745] Code: 910a0000 aa1303e1 aa1503e3 95e4a84c (d4210000) [ 216.031084][T25745] ---[ end trace 0000000000000000 ]--- [ 216.597368][T25745] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 216.599273][T25745] SMP: stopping secondary CPUs [ 216.600506][T25745] Kernel Offset: disabled [ 216.601623][T25745] CPU features: 0x000000,40e00804,64017203 [ 216.603179][T25745] Memory Limit: none [ 217.170738][T25745] Rebooting in 86400 seconds..