xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x79, 0x6, 0xff, 0x8c}, {0x20, 0x4, 0x1f, 0x1}, {0x84, 0x40, 0x1, 0x6}, {0xffff, 0x81, 0x0, 0x1c0}, {0x5, 0x2, 0x1b, 0xc220}]}) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a01, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:36 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r8, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r8, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r10, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r16 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipv6', 0x81, 0x200) linkat(r7, &(0x7f0000000000)='./file0\x00', r16, &(0x7f00000000c0)='./file0\x00', 0x1400) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000002c6c18ae34e6e514be655b7389cf770000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:36 executing program 5: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)={0x2, 0x0, @auto=[0x10, 0x23, 0x3e, 0x1b, 0x30, 0x1, 0x13, 0x33, 0x35]}, 0x11, 0xfffffffffffffff8) request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffe) keyctl$link(0x8, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x652a80, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:36 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 29) 18:27:36 executing program 5: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)={0x2, 0x0, @auto=[0x10, 0x23, 0x3e, 0x1b, 0x30, 0x1, 0x13, 0x33, 0x35]}, 0x11, 0xfffffffffffffff8) request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffe) keyctl$link(0x8, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x652a80, 0x0) write$ppp(r1, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)={0x2, 0x0, @auto=[0x10, 0x23, 0x3e, 0x1b, 0x30, 0x1, 0x13, 0x33, 0x35]}, 0x11, 0xfffffffffffffff8) (async) request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffe) (async) keyctl$link(0x8, r0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x652a80, 0x0) (async) write$ppp(r1, 0x0, 0x0) (async) 18:27:36 executing program 5: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)={0x2, 0x0, @auto=[0x10, 0x23, 0x3e, 0x1b, 0x30, 0x1, 0x13, 0x33, 0x35]}, 0x11, 0xfffffffffffffff8) request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffe) keyctl$link(0x8, r0, 0x0) (async) keyctl$link(0x8, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x652a80, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:36 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff800a) 18:27:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r2, 0x0, 0x0) 18:27:37 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 30) 18:27:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r2, 0x0, 0x0) 18:27:37 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff804f) 18:27:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r2, 0x0, 0x0) 18:27:37 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 30) 18:27:37 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r8, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r8, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r10, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r16 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipv6', 0x81, 0x200) linkat(r7, &(0x7f0000000000)='./file0\x00', r16, &(0x7f00000000c0)='./file0\x00', 0x1400) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async, rerun: 64) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000002c6c18ae34e6e514be655b7389cf770000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:37 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff800b) 18:27:37 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r8, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r8, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r10, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r16 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipv6', 0x81, 0x200) linkat(r7, &(0x7f0000000000)='./file0\x00', r16, &(0x7f00000000c0)='./file0\x00', 0x1400) (async) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000002c6c18ae34e6e514be655b7389cf770000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000080673a2f66696c653000"]) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r12, 0x0, 0x0) 18:27:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000080673a2f66696c653000"]) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) (async) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r12, 0x0, 0x0) 18:27:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000080673a2f66696c653000"]) (async, rerun: 64) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) (async) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r12, 0x0, 0x0) 18:27:37 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x296b81, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400981, 0xf4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCDISCONN(r1, 0x7439) 18:27:37 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 31) 18:27:37 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8050) 18:27:37 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x296b81, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400981, 0xf4) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) 18:27:37 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x296b81, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400981, 0xf4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x296b81, 0x0) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400981, 0xf4) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) 18:27:37 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 31) 18:27:37 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff800c) 18:27:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:38 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r12 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x8400) ioctl$SCSI_IOCTL_DOORLOCK(r12, 0x5380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101}, 0x10) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r11, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r13, 0x5000943f, &(0x7f0000001c00)={{r14}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000240)={0x0, 0x1, 0x2, 0x3f, {0x18, 0xe44, 0x7, 0xffffffffffffff5c, 0x53}, [0x3354]}}, @devid=r15}) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x82a81, 0x0) 18:27:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x82a81, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x82a81, 0x0) (async) 18:27:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x82a81, 0x0) 18:27:38 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 32) 18:27:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 18:27:38 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8051) 18:27:38 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 32) 18:27:38 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff800d) 18:27:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 18:27:38 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r12 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x8400) ioctl$SCSI_IOCTL_DOORLOCK(r12, 0x5380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101}, 0x10) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r11, 0xffffffffffffffff}, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r13, 0x5000943f, &(0x7f0000001c00)={{r14}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000240)={0x0, 0x1, 0x2, 0x3f, {0x18, 0xe44, 0x7, 0xffffffffffffff5c, 0x53}, [0x3354]}}, @devid=r15}) (async, rerun: 32) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) (rerun: 32) 18:27:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 18:27:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x206442, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:38 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r12 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x8400) ioctl$SCSI_IOCTL_DOORLOCK(r12, 0x5380) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101}, 0x10) (async) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r11, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r13, 0x5000943f, &(0x7f0000001c00)={{r14}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000240)={0x0, 0x1, 0x2, 0x3f, {0x18, 0xe44, 0x7, 0xffffffffffffff5c, 0x53}, [0x3354]}}, @devid=r15}) (async, rerun: 32) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) (rerun: 32) 18:27:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x206442, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x206442, 0x0) write$ppp(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x206442, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) 18:27:39 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 33) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1a7381, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) write$ppp(r0, 0x0, 0x0) 18:27:39 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8052) [ 2895.576864][T10340] FAULT_INJECTION: forcing a failure. [ 2895.576864][T10340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2895.590267][T10340] CPU: 1 PID: 10340 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 2895.600732][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2895.610798][T10340] Call Trace: [ 2895.614062][T10340] [ 2895.617111][T10340] dump_stack_lvl+0xda/0x130 [ 2895.621696][T10340] dump_stack+0x15/0x20 [ 2895.625837][T10340] should_fail_ex+0x21f/0x230 [ 2895.630501][T10340] __should_fail_alloc_page+0xfd/0x110 [ 2895.635958][T10340] __alloc_pages+0x108/0x340 [ 2895.640535][T10340] alloc_pages_mpol+0xb1/0x1d0 [ 2895.645298][T10340] alloc_pages+0xe0/0x100 [ 2895.649670][T10340] pte_alloc_one+0x32/0xe0 [ 2895.654199][T10340] __pte_alloc+0x33/0x270 [ 2895.658580][T10340] handle_mm_fault+0x2144/0x2dd0 [ 2895.663513][T10340] ? folio_mark_accessed+0x38/0x190 [ 2895.668706][T10340] __get_user_pages+0x402/0xe40 [ 2895.673626][T10340] __gup_longterm_locked+0xeb7/0x14f0 [ 2895.679062][T10340] ? __rcu_read_unlock+0x4d/0x70 [ 2895.684096][T10340] ? blk_mq_run_hw_queue+0x2a9/0x4c0 [ 2895.689365][T10340] ? __rcu_read_unlock+0x4d/0x70 [ 2895.694321][T10340] ? __rcu_read_lock+0x35/0x50 [ 2895.699079][T10340] ? __pte_offset_map+0xc4/0x140 [ 2895.704053][T10340] internal_get_user_pages_fast+0x197b/0x25a0 [ 2895.710138][T10340] pin_user_pages_fast+0x92/0xe0 [ 2895.715075][T10340] iov_iter_extract_pages+0x26e/0x4c0 [ 2895.720436][T10340] bio_iov_iter_get_pages+0x333/0xb60 [ 2895.725869][T10340] ? bio_alloc_bioset+0x899/0xb10 [ 2895.730916][T10340] iomap_dio_bio_iter+0x7dc/0xbe0 [ 2895.735977][T10340] __iomap_dio_rw+0x8db/0x1090 [ 2895.740724][T10340] iomap_dio_rw+0x40/0x90 [ 2895.745068][T10340] ext4_file_write_iter+0xa8a/0xe10 [ 2895.750318][T10340] vfs_write+0x48a/0x790 [ 2895.754546][T10340] ksys_write+0xeb/0x1a0 [ 2895.758815][T10340] __x64_sys_write+0x42/0x50 [ 2895.763436][T10340] do_syscall_64+0x44/0x110 [ 2895.768016][T10340] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2895.773893][T10340] RIP: 0033:0x7f194e4a0ba9 [ 2895.778293][T10340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2895.797891][T10340] RSP: 002b:00007f194d8230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2895.806286][T10340] RAX: ffffffffffffffda RBX: 00007f194e5bff80 RCX: 00007f194e4a0ba9 [ 2895.814267][T10340] RDX: 00000000ffff8024 RSI: 00000000200000c0 RDI: 0000000000000003 18:27:39 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 33) 18:27:39 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff800e) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1a7381, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) [ 2895.822310][T10340] RBP: 00007f194d823120 R08: 0000000000000000 R09: 0000000000000000 [ 2895.830305][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.838525][T10340] R13: 000000000000000b R14: 00007f194e5bff80 R15: 00007ffe16de8428 [ 2895.846535][T10340] 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1a7381, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) (async) write$ppp(r0, 0x0, 0x0) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x468482, 0x0) write$ppp(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x468482, 0x0) write$ppp(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) 18:27:39 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4003, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8}, 0x8) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x468482, 0x0) write$ppp(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) write$ppp(r0, 0x0, 0x0) 18:27:39 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) write$ppp(r0, 0x0, 0x0) 18:27:39 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8053) 18:27:39 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 34) 18:27:40 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 34) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) write$ppp(r0, 0x0, 0x0) 18:27:40 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff800f) 18:27:40 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4003, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8}, 0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x8000) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4003, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8}, 0x8) (async) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r2}, r3, 0x2, @unused=[0x100000001, 0x656b, 0x3, 0x9], @subvolid=0x2}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xb6f, 0x5, 0x2, 0x1ff, 0x3, [0x6, 0xfffffbfd, 0x1ff, 0xffffffff]}) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r2}, r3, 0x2, @unused=[0x100000001, 0x656b, 0x3, 0x9], @subvolid=0x2}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xb6f, 0x5, 0x2, 0x1ff, 0x3, [0x6, 0xfffffbfd, 0x1ff, 0xffffffff]}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r2}, r3, 0x2, @unused=[0x100000001, 0x656b, 0x3, 0x9], @subvolid=0x2}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xb6f, 0x5, 0x2, 0x1ff, 0x3, [0x6, 0xfffffbfd, 0x1ff, 0xffffffff]}) (async) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r2}, r3, 0x2, @unused=[0x100000001, 0x656b, 0x3, 0x9], @subvolid=0x2}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xb6f, 0x5, 0x2, 0x1ff, 0x3, [0x6, 0xfffffbfd, 0x1ff, 0xffffffff]}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xb6f, 0x5, 0x2, 0x1ff, 0x3, [0x6, 0xfffffbfd, 0x1ff, 0xffffffff]}) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(r0, 0x0, 0x0) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) write$ppp(r0, 0x0, 0x0) 18:27:40 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8054) 18:27:40 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 35) 18:27:40 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 35) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0000001c000000002e2f66696c653000"]) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) write$ppp(r0, 0x0, 0x0) 18:27:40 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8010) 18:27:40 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0000001c000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0000001c000000002e2f66696c653000"]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) 18:27:40 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4003, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8}, 0x8) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0000001c000000002e2f66696c653000"]) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) write$ppp(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0000001c000000002e2f66696c653000"]) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) (async) write$ppp(r0, 0x0, 0x0) (async) 18:27:40 executing program 5: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) 18:27:40 executing program 5: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x4) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) 18:27:40 executing program 5: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x4) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) 18:27:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) 18:27:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) 18:27:41 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 36) 18:27:41 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 36) 18:27:41 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8055) 18:27:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 64) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async, rerun: 64) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) 18:27:41 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8011) 18:27:41 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x48d501, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000300)={{}, 0x1, &(0x7f0000000100)=[0x3], 0x3, 0x5, 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x17c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x5934}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x3, 0x38, 0x1, 0x0, 0x1, 0x5, 0x1b, 0x36, 0x48, 0x3, 0x6c, 0x12, 0x12, 0x16, 0x16, 0x1, 0x60, 0x6c, 0x6c, 0x48, 0x48, 0x4, 0x30, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x5, 0x7ff, 0x3ff, 0x5, 0xffff, 0xed6]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x3ff, 0xfeff, 0xfff, 0x6, 0x733, 0xd800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7fff, 0x400, 0x5, 0x79, 0x200, 0x5, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4750, 0x5, 0x8000, 0x0, 0x100, 0x2, 0x5a, 0xb69]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3f, 0x5, 0xff, 0x7, 0x3, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0xa1, 0x1, 0x2bd, 0x9, 0x8, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x7, 0x3, 0xff, 0xffcc, 0xfff, 0x5, 0x76]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c3d, 0x81d, 0x1f, 0x2, 0x6, 0x3, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x40}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x36}, {0xc}, {0x17}, {0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x0, 0x1}, {0x30}, {0x1e, 0x1}, {0x24}, {0x6, 0x1}, {0x16}, {0x6, 0x1}, {0x1b}, {0x18}, {0x6c}, {0x36}, {0x6c}, {0x6, 0x1}, {0x4}, {0x60}, {0x2}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x80004) 18:27:41 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 37) 18:27:41 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x48d501, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000300)={{}, 0x1, &(0x7f0000000100)=[0x3], 0x3, 0x5, 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x17c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x5934}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x3, 0x38, 0x1, 0x0, 0x1, 0x5, 0x1b, 0x36, 0x48, 0x3, 0x6c, 0x12, 0x12, 0x16, 0x16, 0x1, 0x60, 0x6c, 0x6c, 0x48, 0x48, 0x4, 0x30, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x5, 0x7ff, 0x3ff, 0x5, 0xffff, 0xed6]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x3ff, 0xfeff, 0xfff, 0x6, 0x733, 0xd800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7fff, 0x400, 0x5, 0x79, 0x200, 0x5, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4750, 0x5, 0x8000, 0x0, 0x100, 0x2, 0x5a, 0xb69]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3f, 0x5, 0xff, 0x7, 0x3, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0xa1, 0x1, 0x2bd, 0x9, 0x8, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x7, 0x3, 0xff, 0xffcc, 0xfff, 0x5, 0x76]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c3d, 0x81d, 0x1f, 0x2, 0x6, 0x3, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x40}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x36}, {0xc}, {0x17}, {0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x0, 0x1}, {0x30}, {0x1e, 0x1}, {0x24}, {0x6, 0x1}, {0x16}, {0x6, 0x1}, {0x1b}, {0x18}, {0x6c}, {0x36}, {0x6c}, {0x6, 0x1}, {0x4}, {0x60}, {0x2}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x80004) 18:27:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2e81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:41 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x48d501, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000300)={{}, 0x1, &(0x7f0000000100)=[0x3], 0x3, 0x5, 0x1}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x17c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x5934}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x3, 0x38, 0x1, 0x0, 0x1, 0x5, 0x1b, 0x36, 0x48, 0x3, 0x6c, 0x12, 0x12, 0x16, 0x16, 0x1, 0x60, 0x6c, 0x6c, 0x48, 0x48, 0x4, 0x30, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x5, 0x7ff, 0x3ff, 0x5, 0xffff, 0xed6]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x3ff, 0xfeff, 0xfff, 0x6, 0x733, 0xd800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7fff, 0x400, 0x5, 0x79, 0x200, 0x5, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4750, 0x5, 0x8000, 0x0, 0x100, 0x2, 0x5a, 0xb69]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3f, 0x5, 0xff, 0x7, 0x3, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0xa1, 0x1, 0x2bd, 0x9, 0x8, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x7, 0x3, 0xff, 0xffcc, 0xfff, 0x5, 0x76]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c3d, 0x81d, 0x1f, 0x2, 0x6, 0x3, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x40}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x36}, {0xc}, {0x17}, {0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x0, 0x1}, {0x30}, {0x1e, 0x1}, {0x24}, {0x6, 0x1}, {0x16}, {0x6, 0x1}, {0x1b}, {0x18}, {0x6c}, {0x36}, {0x6c}, {0x6, 0x1}, {0x4}, {0x60}, {0x2}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x80004) 18:27:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2e81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:41 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6460c2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r1, &(0x7f0000000140)='\x00', 0x1) 18:27:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2e81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:42 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6460c2, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) write$ppp(r1, &(0x7f0000000140)='\x00', 0x1) 18:27:42 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8056) 18:27:42 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 37) 18:27:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:42 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6460c2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r1, &(0x7f0000000140)='\x00', 0x1) 18:27:42 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8012) 18:27:42 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 38) 18:27:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:42 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc2a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc2a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc2a81, 0x0) write$ppp(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc2a81, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) 18:27:43 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8057) 18:27:43 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 38) 18:27:43 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:43 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 39) 18:27:43 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8013) 18:27:43 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:43 executing program 5: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:43 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2004c0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x9, 0x4) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000140)=0x3) write$ppp(r0, 0x0, 0x0) 18:27:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2004c0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x9, 0x4) (async) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000140)=0x3) write$ppp(r0, 0x0, 0x0) 18:27:43 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2004c0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x9, 0x4) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000140)=0x3) write$ppp(r0, 0x0, 0x0) 18:27:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) write$ppp(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 18:27:43 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8058) 18:27:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) write$ppp(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x20) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) write$ppp(r2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) 18:27:43 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 39) 18:27:43 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 40) 18:27:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) write$ppp(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x20) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) write$ppp(r2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) 18:27:43 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8014) 18:27:43 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x17, &(0x7f0000000100)=""/23}, 0x90) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:43 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:43 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x17, &(0x7f0000000100)=""/23}, 0x90) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) 18:27:43 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x1d781, 0x11) pipe2$watch_queue(&(0x7f0000000100), 0x80) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x4, 0x0, [0x0, 0x7, 0x3, 0x8]}) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:43 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x17, &(0x7f0000000100)=""/23}, 0x90) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:43 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x1d781, 0x11) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x4, 0x0, [0x0, 0x7, 0x3, 0x8]}) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:43 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8059) 18:27:44 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 40) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x44ea83, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:44 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x1d781, 0x11) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x4, 0x0, [0x0, 0x7, 0x3, 0x8]}) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:44 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 41) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x44ea83, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:44 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8015) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x44ea83, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:44 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/vsock', 0x101080, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @ldst={0x1, 0x1, 0xb, 0x1, 0x1, 0x1, 0xf}], &(0x7f0000000340)='GPL\x00', 0x1000, 0x5b, &(0x7f0000000380)=""/91, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r10], &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x6}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x1, 0x4}, {0x3, 0x2, 0x8, 0x4}, {0x3, 0x3, 0x7, 0x5}, {0x4, 0x3, 0x9}, {0x0, 0x5, 0x0, 0xc}, {0x2, 0x3, 0x7, 0x7}], 0x10, 0x1}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r14 = socket(0x1e, 0x800, 0x80) sendmsg$NL80211_CMD_GET_WIPHY(r14, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x202, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r15, 0xffffffffffffffff, r16, r11, r1, r12, r4, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r17 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r17, 0x40309410, 0x0) setsockopt$MRT6_ASSERT(r17, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)=0x2) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x98082, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 18:27:44 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff805a) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x98082, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x98082, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x98082, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 18:27:44 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 41) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x183e81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x183e81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:44 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 42) 18:27:44 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x183e81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x183e81, 0x0) write$ppp(r0, 0x0, 0x0) [ 2901.420415][T10597] FAULT_INJECTION: forcing a failure. [ 2901.420415][T10597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2901.433678][T10597] CPU: 0 PID: 10597 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 2901.444087][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2901.454176][T10597] Call Trace: [ 2901.457440][T10597] [ 2901.460359][T10597] dump_stack_lvl+0xda/0x130 [ 2901.464967][T10597] dump_stack+0x15/0x20 [ 2901.469115][T10597] should_fail_ex+0x21f/0x230 [ 2901.473902][T10597] __should_fail_alloc_page+0xfd/0x110 [ 2901.479442][T10597] __alloc_pages+0x108/0x340 [ 2901.484041][T10597] alloc_pages_mpol+0xb1/0x1d0 [ 2901.488899][T10597] alloc_pages+0xe0/0x100 [ 2901.493248][T10597] pte_alloc_one+0x32/0xe0 [ 2901.497773][T10597] __pte_alloc+0x33/0x270 [ 2901.502097][T10597] handle_mm_fault+0x2144/0x2dd0 [ 2901.507114][T10597] ? folio_mark_accessed+0x38/0x190 [ 2901.512398][T10597] __get_user_pages+0x402/0xe40 [ 2901.517305][T10597] __gup_longterm_locked+0xeb7/0x14f0 [ 2901.522746][T10597] ? __rcu_read_unlock+0x4d/0x70 [ 2901.527671][T10597] ? blk_mq_run_hw_queue+0x2a9/0x4c0 [ 2901.532959][T10597] ? __rcu_read_unlock+0x4d/0x70 [ 2901.537920][T10597] ? __rcu_read_lock+0x35/0x50 [ 2901.542670][T10597] ? __pte_offset_map+0xc4/0x140 [ 2901.547769][T10597] internal_get_user_pages_fast+0x197b/0x25a0 [ 2901.553924][T10597] pin_user_pages_fast+0x92/0xe0 [ 2901.558877][T10597] iov_iter_extract_pages+0x26e/0x4c0 [ 2901.564359][T10597] bio_iov_iter_get_pages+0x333/0xb60 [ 2901.569773][T10597] ? bio_alloc_bioset+0x899/0xb10 [ 2901.574852][T10597] iomap_dio_bio_iter+0x7dc/0xbe0 [ 2901.579936][T10597] __iomap_dio_rw+0x8db/0x1090 [ 2901.584720][T10597] iomap_dio_rw+0x40/0x90 [ 2901.589032][T10597] ext4_file_write_iter+0xa8a/0xe10 [ 2901.594258][T10597] vfs_write+0x48a/0x790 [ 2901.598520][T10597] ksys_write+0xeb/0x1a0 [ 2901.602854][T10597] __x64_sys_write+0x42/0x50 [ 2901.607506][T10597] do_syscall_64+0x44/0x110 [ 2901.612020][T10597] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2901.617918][T10597] RIP: 0033:0x7f194e4a0ba9 [ 2901.622340][T10597] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2901.641961][T10597] RSP: 002b:00007f194d8230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2901.650377][T10597] RAX: ffffffffffffffda RBX: 00007f194e5bff80 RCX: 00007f194e4a0ba9 [ 2901.658382][T10597] RDX: 00000000ffff8024 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2901.666447][T10597] RBP: 00007f194d823120 R08: 0000000000000000 R09: 0000000000000000 [ 2901.674417][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2901.682371][T10597] R13: 000000000000000b R14: 00007f194e5bff80 R15: 00007ffe16de8428 [ 2901.690419][T10597] 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2c07}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x2, 0x2, 0x2, 0xb, 0x6, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x8000000, 0xc1, &(0x7f00000000c0)=""/193, 0x40f00, 0x65, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x3, 0xc}, 0x10, 0x53d5, r0, 0x0, &(0x7f0000000240)=[r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x90) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000340)) 18:27:45 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8016) 18:27:45 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/vsock', 0x101080, 0xc0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @ldst={0x1, 0x1, 0xb, 0x1, 0x1, 0x1, 0xf}], &(0x7f0000000340)='GPL\x00', 0x1000, 0x5b, &(0x7f0000000380)=""/91, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r10], &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x6}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x1, 0x4}, {0x3, 0x2, 0x8, 0x4}, {0x3, 0x3, 0x7, 0x5}, {0x4, 0x3, 0x9}, {0x0, 0x5, 0x0, 0xc}, {0x2, 0x3, 0x7, 0x7}], 0x10, 0x1}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) r14 = socket(0x1e, 0x800, 0x80) sendmsg$NL80211_CMD_GET_WIPHY(r14, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x202, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r15, 0xffffffffffffffff, r16, r11, r1, r12, r4, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) r17 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r17, 0x40309410, 0x0) (async, rerun: 32) setsockopt$MRT6_ASSERT(r17, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)=0x2) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44) 18:27:45 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 42) 18:27:45 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff805b) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2c07}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x2, 0x2, 0x2, 0xb, 0x6, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x8000000, 0xc1, &(0x7f00000000c0)=""/193, 0x40f00, 0x65, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x3, 0xc}, 0x10, 0x53d5, r0, 0x0, &(0x7f0000000240)=[r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x90) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000340)) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2c07}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x2, 0x2, 0x2, 0xb, 0x6, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x8000000, 0xc1, &(0x7f00000000c0)=""/193, 0x40f00, 0x65, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x3, 0xc}, 0x10, 0x53d5, r0, 0x0, &(0x7f0000000240)=[r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x90) (async) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000340)) (async) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2c07}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x2, 0x2, 0x2, 0xb, 0x6, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x8000000, 0xc1, &(0x7f00000000c0)=""/193, 0x40f00, 0x65, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x3, 0xc}, 0x10, 0x53d5, r0, 0x0, &(0x7f0000000240)=[r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x90) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000340)) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xe77}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r8, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r8, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000fdfe0e3ae2a0ae66695603cf5d04399e14f3e453734b5b1277552c4dccaed5495916e18af975f7b6b7829e4dc2843b3ba9169229c4a306eedc4399eec59001e0a199f165699142a0f98b0b27b7a0999f93b5bce8", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0x5}, {0x5, 0x5, 0x9, 0x8}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x4}, {0x3, 0x3, 0xa, 0x2}], 0x10, 0x9}, 0x90) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file1\x00', 0x0, 0x8}, 0x18) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xc7, &(0x7f0000000640)=""/199, 0x41100, 0x10, '\x00', 0x0, 0x19, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x8001, 0x7fffffff}, 0x10, 0x18a1b, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[r6, r15, r16, r17], &(0x7f0000000180)=[{0x4, 0x2, 0x1, 0xa}, {0x3, 0x5, 0x0, 0x7}, {0x1, 0x1, 0x0, 0x5}], 0x10, 0x10ff}, 0x90) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r18, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r21 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r20, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r20}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r19, r20, 0xffffffffffffffff, r21, r5, r22, r18, r4, r18], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x6}, {0x4, 0x2, 0xe, 0x6}, {0x3, 0x3, 0x8, 0x9}, {0x1, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xe77}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x48) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r8, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r8, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000fdfe0e3ae2a0ae66695603cf5d04399e14f3e453734b5b1277552c4dccaed5495916e18af975f7b6b7829e4dc2843b3ba9169229c4a306eedc4399eec59001e0a199f165699142a0f98b0b27b7a0999f93b5bce8", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0x5}, {0x5, 0x5, 0x9, 0x8}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x4}, {0x3, 0x3, 0xa, 0x2}], 0x10, 0x9}, 0x90) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file1\x00', 0x0, 0x8}, 0x18) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xc7, &(0x7f0000000640)=""/199, 0x41100, 0x10, '\x00', 0x0, 0x19, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x8001, 0x7fffffff}, 0x10, 0x18a1b, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[r6, r15, r16, r17], &(0x7f0000000180)=[{0x4, 0x2, 0x1, 0xa}, {0x3, 0x5, 0x0, 0x7}, {0x1, 0x1, 0x0, 0x5}], 0x10, 0x10ff}, 0x90) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r18, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r21 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r20, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r20}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r19, r20, 0xffffffffffffffff, r21, r5, r22, r18, r4, r18], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x6}, {0x4, 0x2, 0xe, 0x6}, {0x3, 0x3, 0x8, 0x9}, {0x1, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xe77}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xe77}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r8, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r8, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000fdfe0e3ae2a0ae66695603cf5d04399e14f3e453734b5b1277552c4dccaed5495916e18af975f7b6b7829e4dc2843b3ba9169229c4a306eedc4399eec59001e0a199f165699142a0f98b0b27b7a0999f93b5bce8", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0x5}, {0x5, 0x5, 0x9, 0x8}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x4}, {0x3, 0x3, 0xa, 0x2}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r14, 0xffffffffffffffff, r15, r11, r7, r12, r10, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0x5}, {0x5, 0x5, 0x9, 0x8}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x4}, {0x3, 0x3, 0xa, 0x2}], 0x10, 0x9}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file1\x00', 0x0, 0x8}, 0x18) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file1\x00', 0x0, 0x8}, 0x18) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xc7, &(0x7f0000000640)=""/199, 0x41100, 0x10, '\x00', 0x0, 0x19, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x8001, 0x7fffffff}, 0x10, 0x18a1b, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[r6, r15, r16, r17], &(0x7f0000000180)=[{0x4, 0x2, 0x1, 0xa}, {0x3, 0x5, 0x0, 0x7}, {0x1, 0x1, 0x0, 0x5}], 0x10, 0x10ff}, 0x90) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r18, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r18, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r21 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r20, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r20}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r20, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r20}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r19, r20, 0xffffffffffffffff, r21, r5, r22, r18, r4, r18], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x6}, {0x4, 0x2, 0xe, 0x6}, {0x3, 0x3, 0x8, 0x9}, {0x1, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 18:27:45 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 43) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) socket(0x26, 0xa, 0x5) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x5}], &(0x7f0000000140)='GPL\x00', 0x0, 0xcc, &(0x7f0000000180)=""/204, 0x41000, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x200, 0x3}, 0x10, 0x1b885, r1, 0x4, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x8, 0x6}, {0x3, 0x4, 0x2, 0xa}, {0x5, 0x5, 0x3, 0x9}, {0x1, 0x2, 0x6, 0x3}]}, 0x90) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)) 18:27:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) socket(0x26, 0xa, 0x5) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x5}], &(0x7f0000000140)='GPL\x00', 0x0, 0xcc, &(0x7f0000000180)=""/204, 0x41000, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x200, 0x3}, 0x10, 0x1b885, r1, 0x4, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x8, 0x6}, {0x3, 0x4, 0x2, 0xa}, {0x5, 0x5, 0x3, 0x9}, {0x1, 0x2, 0x6, 0x3}]}, 0x90) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)) 18:27:46 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8017) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) socket(0x26, 0xa, 0x5) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x5}], &(0x7f0000000140)='GPL\x00', 0x0, 0xcc, &(0x7f0000000180)=""/204, 0x41000, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x200, 0x3}, 0x10, 0x1b885, r1, 0x4, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x8, 0x6}, {0x3, 0x4, 0x2, 0xa}, {0x5, 0x5, 0x3, 0x9}, {0x1, 0x2, 0x6, 0x3}]}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x5}], &(0x7f0000000140)='GPL\x00', 0x0, 0xcc, &(0x7f0000000180)=""/204, 0x41000, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x200, 0x3}, 0x10, 0x1b885, r1, 0x4, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x8, 0x6}, {0x3, 0x4, 0x2, 0xa}, {0x5, 0x5, 0x3, 0x9}, {0x1, 0x2, 0x6, 0x3}]}, 0x90) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)) 18:27:46 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (rerun: 64) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/vsock', 0x101080, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @ldst={0x1, 0x1, 0xb, 0x1, 0x1, 0x1, 0xf}], &(0x7f0000000340)='GPL\x00', 0x1000, 0x5b, &(0x7f0000000380)=""/91, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r10], &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x6}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x1, 0x4}, {0x3, 0x2, 0x8, 0x4}, {0x3, 0x3, 0x7, 0x5}, {0x4, 0x3, 0x9}, {0x0, 0x5, 0x0, 0xc}, {0x2, 0x3, 0x7, 0x7}], 0x10, 0x1}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) r14 = socket(0x1e, 0x800, 0x80) sendmsg$NL80211_CMD_GET_WIPHY(r14, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x202, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r15, 0xffffffffffffffff, r16, r11, r1, r12, r4, r12], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r17 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r17, 0x40309410, 0x0) (async) setsockopt$MRT6_ASSERT(r17, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (rerun: 32) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)=0x2) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44) 18:27:46 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff805c) 18:27:46 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 43) 18:27:46 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x14c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x9ab81, 0x0) write$ppp(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200401, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) 18:27:46 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 44) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x9ab81, 0x0) write$ppp(r0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200401, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x9ab81, 0x0) write$ppp(r0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200401, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 18:27:46 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8018) 18:27:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 18:27:46 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429", 0x3c}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee01, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:46 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff805d) 18:27:46 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429", 0x3c}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee01, r0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:47 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (fail_nth: 44) 18:27:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429", 0x3c}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) (async) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee01, r0) (async) keyctl$get_persistent(0x16, 0xee01, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:47 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x14c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:47 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 45) 18:27:47 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8019) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) write$ppp(r0, 0x0, 0x0) 18:27:47 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) write$ppp(r0, 0x0, 0x0) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) write$ppp(r0, 0x0, 0x0) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xe000000, @empty, 0x8efa}, {0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1, {[0x3, 0x7fff, 0x80000008, 0x3, 0xfffffffa, 0x9, 0xbf, 0x8]}}, 0x5c) write$ppp(r0, 0x0, 0x0) r1 = socket(0x8, 0x1, 0x7) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x811) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r11, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x62, 0xd3, 0x2}, 0x6) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xe000000, @empty, 0x8efa}, {0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1, {[0x3, 0x7fff, 0x80000008, 0x3, 0xfffffffa, 0x9, 0xbf, 0x8]}}, 0x5c) (async) write$ppp(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x8, 0x1, 0x7) (rerun: 32) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) (rerun: 64) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async, rerun: 32) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) (rerun: 32) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x811) (async, rerun: 32) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r11, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (rerun: 64) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x62, 0xd3, 0x2}, 0x6) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xe000000, @empty, 0x8efa}, {0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1, {[0x3, 0x7fff, 0x80000008, 0x3, 0xfffffffa, 0x9, 0xbf, 0x8]}}, 0x5c) (async) write$ppp(r0, 0x0, 0x0) r1 = socket(0x8, 0x1, 0x7) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x811) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r11, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x62, 0xd3, 0x2}, 0x6) 18:27:47 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff805e) 18:27:47 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) 18:27:47 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x14c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x14c581, 0x0) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:27:47 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 46) 18:27:47 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff805f) 18:27:47 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801a) 18:27:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (rerun: 32) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (rerun: 64) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) (rerun: 32) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (rerun: 64) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$negate(0xd, 0x0, 0x8, r1) write$ppp(r0, 0x0, 0xffffffffffffff49) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@i}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xffffff6c, 0x0, r10, 0xffffffff, '\x00', 0x0, r11, 0x0, 0x4, 0x3}, 0x48) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$negate(0xd, 0x0, 0x8, r1) (async) write$ppp(r0, 0x0, 0xffffffffffffff49) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 64) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async, rerun: 32) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 32) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) (async, rerun: 64) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@i}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xffffff6c, 0x0, r10, 0xffffffff, '\x00', 0x0, r11, 0x0, 0x4, 0x3}, 0x48) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$negate(0xd, 0x0, 0x8, r1) write$ppp(r0, 0x0, 0xffffffffffffff49) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 64) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@i}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xffffff6c, 0x0, r10, 0xffffffff, '\x00', 0x0, r11, 0x0, 0x4, 0x3}, 0x48) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa6a01, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:48 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff1f00) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa6a01, 0x0) write$ppp(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa6a01, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) 18:27:48 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 47) 18:27:48 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8060) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa6a01, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:48 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801b) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r3, 0x7, 0x18}, 0xc) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x4, 0x38}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x40) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x8}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, 0xffffffffffffffff, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) 18:27:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r2, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="080029bd7000fddbdf254b000000080003008da2cba88ffc1a949841e3941a31602bfb19c822913be0a542fcb7e8fcfc696fd0516ff74841a31544b53768888c002554aa12c9f97945ce78658f83291d7a432499b71d38e17d18550bb8b465c7e7456a13894192941abdcef1288376ab78c539dba56f27a146cdf9f16960c174b5a3570ee1edb7fb6a9eb3cc7d4bb38e9b6f8e1b8c5f080ef8fecda3bbcaf10a1bbe6abc97ba0cc6e466489d99e3", @ANYRES32=r0, @ANYBLOB="0c009900010000007a0000000600f7000e0000009c007d8098000200b8ca636156706800fa6802157278dd09adf0f0be15eabf4f112ffbb3abc80fddcf25200736963e0ba21cc1fd3ee312a4442ccb210f9f35e04210466f67f8dfafed42b5c82d612838dd329bdc5e1f8c8add56df535b252774d0897a5a66fb114040f9b6805aa6211c0f6a266f3df14ea59d5b64bb13700acb3ce81c260b7a47d7ddd83a0354b8810fbd455c6bdfe24e5ee2e720a808007700400000000600f700023f000034002d800a00000001010101010100000a00000001010101010100000a00000001010101010100000a0000000101010101010000"], 0x110}, 0x1, 0x0, 0x0, 0x440c1}, 0xc000) mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x103) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r3, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:48 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8008) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r3, 0x7, 0x18}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x4, 0x38}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x40) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x8}, 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) (async) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, 0xffffffffffffffff, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r3, 0x7, 0x18}, 0xc) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x4, 0x38}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x40) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x8}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x8}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, 0xffffffffffffffff, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, 0xffffffffffffffff, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x3ff, 0x1, [0x20, 0x8, 0x6, 0x81]}) 18:27:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x3ff, 0x1, [0x20, 0x8, 0x6, 0x81]}) 18:27:49 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x3ff, 0x1, [0x20, 0x8, 0x6, 0x81]}) 18:27:49 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 48) 18:27:49 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8061) 18:27:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket(0x23, 0x5, 0x45) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x4dc, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x334, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2c}, @NL80211_NAN_FUNC_SRF={0x2a8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SRF={0x80, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SRF={0x168, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) connect$802154_dgram(r5, &(0x7f0000000880)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r4, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x2f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdef}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r6, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040045) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180a7031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfadc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d60fba}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x88d) 18:27:49 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801c) 18:27:49 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff800c) 18:27:49 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x23, 0x5, 0x45) (async) r1 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r2, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="080029bd7000fddbdf254b000000080003008da2cba88ffc1a949841e3941a31602bfb19c822913be0a542fcb7e8fcfc696fd0516ff74841a31544b53768888c002554aa12c9f97945ce78658f83291d7a432499b71d38e17d18550bb8b465c7e7456a13894192941abdcef1288376ab78c539dba56f27a146cdf9f16960c174b5a3570ee1edb7fb6a9eb3cc7d4bb38e9b6f8e1b8c5f080ef8fecda3bbcaf10a1bbe6abc97ba0cc6e466489d99e3", @ANYRES32=r0, @ANYBLOB="0c009900010000007a0000000600f7000e0000009c007d8098000200b8ca636156706800fa6802157278dd09adf0f0be15eabf4f112ffbb3abc80fddcf25200736963e0ba21cc1fd3ee312a4442ccb210f9f35e04210466f67f8dfafed42b5c82d612838dd329bdc5e1f8c8add56df535b252774d0897a5a66fb114040f9b6805aa6211c0f6a266f3df14ea59d5b64bb13700acb3ce81c260b7a47d7ddd83a0354b8810fbd455c6bdfe24e5ee2e720a808007700400000000600f700023f000034002d800a00000001010101010100000a00000001010101010100000a00000001010101010100000a0000000101010101010000"], 0x110}, 0x1, 0x0, 0x0, 0x440c1}, 0xc000) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="080029bd7000fddbdf254b000000080003008da2cba88ffc1a949841e3941a31602bfb19c822913be0a542fcb7e8fcfc696fd0516ff74841a31544b53768888c002554aa12c9f97945ce78658f83291d7a432499b71d38e17d18550bb8b465c7e7456a13894192941abdcef1288376ab78c539dba56f27a146cdf9f16960c174b5a3570ee1edb7fb6a9eb3cc7d4bb38e9b6f8e1b8c5f080ef8fecda3bbcaf10a1bbe6abc97ba0cc6e466489d99e3", @ANYRES32=r0, @ANYBLOB="0c009900010000007a0000000600f7000e0000009c007d8098000200b8ca636156706800fa6802157278dd09adf0f0be15eabf4f112ffbb3abc80fddcf25200736963e0ba21cc1fd3ee312a4442ccb210f9f35e04210466f67f8dfafed42b5c82d612838dd329bdc5e1f8c8add56df535b252774d0897a5a66fb114040f9b6805aa6211c0f6a266f3df14ea59d5b64bb13700acb3ce81c260b7a47d7ddd83a0354b8810fbd455c6bdfe24e5ee2e720a808007700400000000600f700023f000034002d800a00000001010101010100000a00000001010101010100000a00000001010101010100000a0000000101010101010000"], 0x110}, 0x1, 0x0, 0x0, 0x440c1}, 0xc000) mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x103) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r3, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r2 = socket(0x23, 0x5, 0x45) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x4dc, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x334, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2c}, @NL80211_NAN_FUNC_SRF={0x2a8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "d299e1578939310f8bda162ecfc74adbb3f045bb1bd9a83f7348a528751fdc4a0a6b7817cea5dd93803dd9778adf612d03419677484a871b98c686492a0a37c46f1cd83a414875b08aa6f6226ba05dcc6d49f20c12e38f9e2756b56ad6959e100ebbd6107367fc00a45c6a0b8eff87b2d696f9f5afcae44cb8b0569b5b014ece12fa52293c02dcbc97599921343061dc086f655b7f862d20958613486f6f3be1f65af3a17b78b95fd219b9f29c1a872192ab2a1241493894af59bc40ac4a1dde8a0db9864b86beb6d5f58a440a9f7f8b15780c9e0bf44ab50659bc2cb6ccb0305f9b2494bde0b984677f95192bd82c9f50e68aa865efcadeab4f32a47aa9d8"}]}, @NL80211_NAN_FUNC_SRF={0x80, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SRF={0x168, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c011) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) connect$802154_dgram(r5, &(0x7f0000000880)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r4, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x2f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdef}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r6, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040045) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r8) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180a7031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfadc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d60fba}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x88d) 18:27:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket(0x23, 0x5, 0x45) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x4dc, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x334, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2c}, @NL80211_NAN_FUNC_SRF={0x2a8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SRF={0x80, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SRF={0x168, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) connect$802154_dgram(r5, &(0x7f0000000880)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r4, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r4, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x2f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdef}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x2f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdef}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r6, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040045) (async) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040045) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180a7031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfadc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d60fba}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x88d) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180a7031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfadc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d60fba}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x88d) 18:27:49 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbhid', 0x200800, 0x40) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x283, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:49 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbhid', 0x200800, 0x40) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x283, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbhid', 0x200800, 0x40) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x283, 0x1}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r1, 0x0, 0x0) (async) 18:27:49 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbhid', 0x200800, 0x40) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x283, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r1, 0x0, 0x0) 18:27:49 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:49 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 49) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:50 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8062) 18:27:50 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801d) 18:27:50 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8010) 18:27:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket(0x23, 0x5, 0x45) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r2, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="080029bd7000fddbdf254b000000080003008da2cba88ffc1a949841e3941a31602bfb19c822913be0a542fcb7e8fcfc696fd0516ff74841a31544b53768888c002554aa12c9f97945ce78658f83291d7a432499b71d38e17d18550bb8b465c7e7456a13894192941abdcef1288376ab78c539dba56f27a146cdf9f16960c174b5a3570ee1edb7fb6a9eb3cc7d4bb38e9b6f8e1b8c5f080ef8fecda3bbcaf10a1bbe6abc97ba0cc6e466489d99e3", @ANYRES32=r0, @ANYBLOB="0c009900010000007a0000000600f7000e0000009c007d8098000200b8ca636156706800fa6802157278dd09adf0f0be15eabf4f112ffbb3abc80fddcf25200736963e0ba21cc1fd3ee312a4442ccb210f9f35e04210466f67f8dfafed42b5c82d612838dd329bdc5e1f8c8add56df535b252774d0897a5a66fb114040f9b6805aa6211c0f6a266f3df14ea59d5b64bb13700acb3ce81c260b7a47d7ddd83a0354b8810fbd455c6bdfe24e5ee2e720a808007700400000000600f700023f000034002d800a00000001010101010100000a00000001010101010100000a00000001010101010100000a0000000101010101010000"], 0x110}, 0x1, 0x0, 0x0, 0x440c1}, 0xc000) mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x103) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r3, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) 18:27:50 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 50) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) r1 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r2, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c4, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb545}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d82f617}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa73a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b3c3546}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d1381b5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30459257}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a2ca73}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa531}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ac1ea9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x735c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68505d97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf250f23}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x299aa205}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f25a220}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a23a7c5}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a46520b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d3c998}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14b55985}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eff32ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e7c7973}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c04d623}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6143aa8f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b00517c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a9e8df9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408ce1bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4c801}, 0x40040) write$ppp(r6, 0x0, 0x0) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f00000002c0)) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) (async) r1 = socket(0x23, 0x5, 0x45) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r2, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r3}, 0x18) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c4, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb545}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d82f617}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa73a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b3c3546}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d1381b5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30459257}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a2ca73}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa531}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ac1ea9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x735c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68505d97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf250f23}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x299aa205}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f25a220}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a23a7c5}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a46520b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d3c998}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14b55985}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eff32ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e7c7973}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c04d623}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6143aa8f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b00517c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a9e8df9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408ce1bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4c801}, 0x40040) (async) write$ppp(r6, 0x0, 0x0) (async) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f00000002c0)) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) r1 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r2, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c4, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb545}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d82f617}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa73a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b3c3546}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d1381b5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30459257}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a2ca73}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa531}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ac1ea9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x735c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68505d97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf250f23}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x299aa205}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f25a220}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a23a7c5}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a46520b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d3c998}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14b55985}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eff32ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e7c7973}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c04d623}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6143aa8f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b00517c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a9e8df9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408ce1bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4c801}, 0x40040) write$ppp(r6, 0x0, 0x0) (async) write$ppp(r6, 0x0, 0x0) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f00000002c0)) (async) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f00000002c0)) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) 18:27:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:27:50 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8063) 18:27:51 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801e) 18:27:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r10) 18:27:51 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:51 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x5, &(0x7f0000000100)=[0x1, 0x1, 0x1, 0x6, 0x57740b46], 0x8001}) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:51 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 51) 18:27:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r10) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r10) (async) 18:27:51 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8064) 18:27:51 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r10) 18:27:51 executing program 5: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x8001, 0x2, 0x2, 0x0, r0, 0x2, '\x00', 0x0, r1, 0x3, 0x0, 0x4}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) unlinkat(r11, &(0x7f00000001c0)='./file0/file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000180)={@broadcast, @private=0xa010102, 0xffffffffffffffff, "520c8b2bed1d54b1449dcc455f61e0ed49f68d30ba2f0d02b30960fafaa4c6f1", 0x2f, 0xf52, 0x101, 0x2d}, 0x3c) write$ppp(r0, 0x0, 0x0) 18:27:51 executing program 5: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x8001, 0x2, 0x2, 0x0, r0, 0x2, '\x00', 0x0, r1, 0x3, 0x0, 0x4}, 0x48) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) unlinkat(r11, &(0x7f00000001c0)='./file0/file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000180)={@broadcast, @private=0xa010102, 0xffffffffffffffff, "520c8b2bed1d54b1449dcc455f61e0ed49f68d30ba2f0d02b30960fafaa4c6f1", 0x2f, 0xf52, 0x101, 0x2d}, 0x3c) (async) write$ppp(r0, 0x0, 0x0) 18:27:51 executing program 5: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x8001, 0x2, 0x2, 0x0, r0, 0x2, '\x00', 0x0, r1, 0x3, 0x0, 0x4}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) unlinkat(r11, &(0x7f00000001c0)='./file0/file0\x00', 0x0) (async) unlinkat(r11, &(0x7f00000001c0)='./file0/file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000180)={@broadcast, @private=0xa010102, 0xffffffffffffffff, "520c8b2bed1d54b1449dcc455f61e0ed49f68d30ba2f0d02b30960fafaa4c6f1", 0x2f, 0xf52, 0x101, 0x2d}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000180)={@broadcast, @private=0xa010102, 0xffffffffffffffff, "520c8b2bed1d54b1449dcc455f61e0ed49f68d30ba2f0d02b30960fafaa4c6f1", 0x2f, 0xf52, 0x101, 0x2d}, 0x3c) write$ppp(r0, 0x0, 0x0) 18:27:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x9, 0x1}) 18:27:51 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8021) 18:27:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x9, 0x1}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x9, 0x1}) (async) 18:27:52 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80) (async) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:27:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x9, 0x1}) 18:27:52 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8065) 18:27:52 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 52) 18:27:52 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x5, &(0x7f0000000100)=[0x1, 0x1, 0x1, 0x6, 0x57740b46], 0x8001}) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) write$ppp(0xffffffffffffffff, 0x0, 0x0) 18:27:52 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8022) 18:27:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async, rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) write$ppp(0xffffffffffffffff, 0x0, 0x0) 18:27:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) write$ppp(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) write$ppp(0xffffffffffffffff, 0x0, 0x0) (async) 18:27:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x8080) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r2, 0x0, 0x0) 18:27:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x8080) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x8080) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r2, 0x0, 0x0) (async) 18:27:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x8080) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x8080) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) write$ppp(r2, 0x0, 0x0) (async) 18:27:52 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x18340, 0x66) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xffffffffffffffff, {[0x80, 0x2, 0x5, 0x8, 0x79, 0xe920, 0x200, 0x5]}}, 0x5c) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000200)=0x2, 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x4, 0x58, 0x5, @vifc_lcl_ifindex=r2, @loopback}, 0x10) write$ppp(r0, 0x0, 0x0) 18:27:53 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x18340, 0x66) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xffffffffffffffff, {[0x80, 0x2, 0x5, 0x8, 0x79, 0xe920, 0x200, 0x5]}}, 0x5c) (async) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000200)=0x2, 0x4) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x4, 0x58, 0x5, @vifc_lcl_ifindex=r2, @loopback}, 0x10) (async) write$ppp(r0, 0x0, 0x0) 18:27:53 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8066) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x5, &(0x7f0000000100)=[0x1, 0x1, 0x1, 0x6, 0x57740b46], 0x8001}) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 53) 18:27:53 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8023) 18:27:53 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x18340, 0x66) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xffffffffffffffff, {[0x80, 0x2, 0x5, 0x8, 0x79, 0xe920, 0x200, 0x5]}}, 0x5c) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000200)=0x2, 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x4, 0x58, 0x5, @vifc_lcl_ifindex=r2, @loopback}, 0x10) (async) write$ppp(r0, 0x0, 0x0) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$link(0x8, r6, 0xfffffffffffffffa) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000010000001800000070acaa0b9cfb75827f5e65cfc5f4096b2cfbe69c34592d8a83bc1bdd003e51724d3ecf0533b89a022dc8ad31a46744d1f6613ae0f9c4596cfe6c17cb79ee0db4b83cea510627179aac3fb51f28ae518fe6bc62316b3e2f56813183a0c8ee12afb53ebf8be3ab31b04f97595cc25f6bc286fe57dee7d6fc00000000000000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x617}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xa2}, @alu={0x7, 0x0, 0xa, 0x7, 0xb, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x98, &(0x7f0000000280)=""/152, 0x41000, 0x15, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, r3, r0, r10, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r19], &(0x7f0000000440)=[{0x5, 0x2, 0x4, 0x6}, {0x0, 0x1, 0xc, 0x7}, {0x4, 0x5, 0x6, 0x9}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="18f000000200000000000000060000004fd60000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) (async) mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$link(0x8, r6, 0xfffffffffffffffa) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000010000001800000070acaa0b9cfb75827f5e65cfc5f4096b2cfbe69c34592d8a83bc1bdd003e51724d3ecf0533b89a022dc8ad31a46744d1f6613ae0f9c4596cfe6c17cb79ee0db4b83cea510627179aac3fb51f28ae518fe6bc62316b3e2f56813183a0c8ee12afb53ebf8be3ab31b04f97595cc25f6bc286fe57dee7d6fc00000000000000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x617}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xa2}, @alu={0x7, 0x0, 0xa, 0x7, 0xb, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x98, &(0x7f0000000280)=""/152, 0x41000, 0x15, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, r3, r0, r10, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r19], &(0x7f0000000440)=[{0x5, 0x2, 0x4, 0x6}, {0x0, 0x1, 0xc, 0x7}, {0x4, 0x5, 0x6, 0x9}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="18f000000200000000000000060000004fd60000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xd204, 0x4ff1, 0x8000, 0x20, 0x1, 0x7fffffff, '\x00', r2, r0, 0x0, 0x1, 0x1, 0xf}, 0x48) write$ppp(r0, 0x0, 0x0) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) (async) keyctl$link(0x8, r6, 0xfffffffffffffffa) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000010000001800000070acaa0b9cfb75827f5e65cfc5f4096b2cfbe69c34592d8a83bc1bdd003e51724d3ecf0533b89a022dc8ad31a46744d1f6613ae0f9c4596cfe6c17cb79ee0db4b83cea510627179aac3fb51f28ae518fe6bc62316b3e2f56813183a0c8ee12afb53ebf8be3ab31b04f97595cc25f6bc286fe57dee7d6fc00000000000000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x617}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xa2}, @alu={0x7, 0x0, 0xa, 0x7, 0xb, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x98, &(0x7f0000000280)=""/152, 0x41000, 0x15, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, r3, r0, r10, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r19], &(0x7f0000000440)=[{0x5, 0x2, 0x4, 0x6}, {0x0, 0x1, 0xc, 0x7}, {0x4, 0x5, 0x6, 0x9}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="18f000000200000000000000060000004fd60000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xd204, 0x4ff1, 0x8000, 0x20, 0x1, 0x7fffffff, '\x00', r2, r0, 0x0, 0x1, 0x1, 0xf}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xd204, 0x4ff1, 0x8000, 0x20, 0x1, 0x7fffffff, '\x00', r2, r0, 0x0, 0x1, 0x1, 0xf}, 0x48) write$ppp(r0, 0x0, 0x0) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x243c1, 0x20) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r0, &(0x7f00000000c0)="8ca373fe97f808436d51a27e54bacde9a31037bcdd01000000000000000ee50400009e429394094bd94013f8c67ce29e9246", 0x32) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1838000004000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="000000000700000085200000000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0x108, &(0x7f0000000780)=""/264, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1, 0x9, 0x8}, 0xc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180007005b020000000000008b90005162102d2c0ae9090018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x81}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @call={0x85, 0x0, 0x0, 0x28}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x11d9, 0x8c, &(0x7f00000002c0)=""/140, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r5, r0, 0xffffffffffffffff, r0, r10, r16], &(0x7f0000000480)=[{0x5, 0x5, 0xf, 0x8}, {0x5, 0x4, 0x10, 0xb}, {0x0, 0x4, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x9}, {0x5, 0x4, 0xa, 0x6}, {0x5, 0x1, 0x7, 0x1}], 0x10, 0x5}, 0x90) 18:27:53 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8067) 18:27:53 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xd204, 0x4ff1, 0x8000, 0x20, 0x1, 0x7fffffff, '\x00', r2, r0, 0x0, 0x1, 0x1, 0xf}, 0x48) (async) write$ppp(r0, 0x0, 0x0) 18:27:53 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 54) 18:27:53 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8024) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x243c1, 0x20) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) write$ppp(r0, &(0x7f00000000c0)="8ca373fe97f808436d51a27e54bacde9a31037bcdd01000000000000000ee50400009e429394094bd94013f8c67ce29e9246", 0x32) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1838000004000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="000000000700000085200000000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0x108, &(0x7f0000000780)=""/264, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1, 0x9, 0x8}, 0xc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180007005b020000000000008b90005162102d2c0ae9090018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x81}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @call={0x85, 0x0, 0x0, 0x28}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x11d9, 0x8c, &(0x7f00000002c0)=""/140, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r5, r0, 0xffffffffffffffff, r0, r10, r16], &(0x7f0000000480)=[{0x5, 0x5, 0xf, 0x8}, {0x5, 0x4, 0x10, 0xb}, {0x0, 0x4, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x9}, {0x5, 0x4, 0xa, 0x6}, {0x5, 0x1, 0x7, 0x1}], 0x10, 0x5}, 0x90) 18:27:53 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, r2, 0x2, 0x3}, 0x48) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000002c0)={{r3}, 0xa, &(0x7f0000000240)=[0x4, 0x8000, 0xbc3, 0x8000000000000001, 0xd1e, 0x6, 0x6, 0xe498, 0x4, 0x1], 0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x243c1, 0x20) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x243c1, 0x20) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) 18:27:53 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) write$ppp(r0, &(0x7f00000000c0)="8ca373fe97f808436d51a27e54bacde9a31037bcdd01000000000000000ee50400009e429394094bd94013f8c67ce29e9246", 0x32) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1838000004000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="000000000700000085200000000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0x108, &(0x7f0000000780)=""/264, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 64) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1, 0x9, 0x8}, 0xc) (async, rerun: 64) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r12, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r14, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r12, 0x4, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x3, '\x00', 0x0, r11, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) (async, rerun: 64) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r16}, 0x18) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180007005b020000000000008b90005162102d2c0ae9090018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r17, r18, 0xffffffffffffffff, r19, r15, r11, r16, r14, r16], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x81}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @call={0x85, 0x0, 0x0, 0x28}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x11d9, 0x8c, &(0x7f00000002c0)=""/140, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r5, r0, 0xffffffffffffffff, r0, r10, r16], &(0x7f0000000480)=[{0x5, 0x5, 0xf, 0x8}, {0x5, 0x4, 0x10, 0xb}, {0x0, 0x4, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x9}, {0x5, 0x4, 0xa, 0x6}, {0x5, 0x1, 0x7, 0x1}], 0x10, 0x5}, 0x90) 18:27:53 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:53 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(r2, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, r2, 0x2, 0x3}, 0x48) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000002c0)={{r3}, 0xa, &(0x7f0000000240)=[0x4, 0x8000, 0xbc3, 0x8000000000000001, 0xd1e, 0x6, 0x6, 0xe498, 0x4, 0x1], 0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 18:27:53 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 18:27:53 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, r2, 0x2, 0x3}, 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, r2, 0x2, 0x3}, 0x48) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000002c0)={{r3}, 0xa, &(0x7f0000000240)=[0x4, 0x8000, 0xbc3, 0x8000000000000001, 0xd1e, 0x6, 0x6, 0xe498, 0x4, 0x1], 0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 18:27:53 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8068) 18:27:53 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 55) 18:27:54 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8025) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc2a01, 0x0) write$ppp(r0, 0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresgid(0xee01, r1, 0x0) setresgid(r1, 0xee01, 0xee00) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc2a01, 0x0) write$ppp(r0, 0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresgid(0xee01, r1, 0x0) (async) setresgid(0xee01, r1, 0x0) setresgid(r1, 0xee01, 0xee00) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc2a01, 0x0) write$ppp(r0, 0x0, 0x0) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresgid(0xee01, r1, 0x0) setresgid(r1, 0xee01, 0xee00) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r6, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0x4, 0x10}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0x4, 0x18}, 0xffffffffffffffd9) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@s}, @map_val={0x18, 0xb, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0xff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x802, 0x3, 0xa, 0xc}, {0x2, 0x2, 0x100000c, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast1, @private=0xa010101, 0xffffffffffffffff, "c686cf5cb42baa83d4f8967098fb2a6ff8d5d583674a4d6f901cf5463ec4161d", 0xde, 0x6, 0x9, 0xdccc}, 0x3c) write$ppp(r0, 0x0, 0x0) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r6, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0x4, 0x10}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0x4, 0x18}, 0xffffffffffffffd9) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@s}, @map_val={0x18, 0xb, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0xff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x802, 0x3, 0xa, 0xc}, {0x2, 0x2, 0x100000c, 0xc}], 0x10, 0x4}, 0x90) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast1, @private=0xa010101, 0xffffffffffffffff, "c686cf5cb42baa83d4f8967098fb2a6ff8d5d583674a4d6f901cf5463ec4161d", 0xde, 0x6, 0x9, 0xdccc}, 0x3c) (async) write$ppp(r0, 0x0, 0x0) 18:27:54 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r6, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0x4, 0x10}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0x4, 0x18}, 0xffffffffffffffd9) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@s}, @map_val={0x18, 0xb, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0xff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x802, 0x3, 0xa, 0xc}, {0x2, 0x2, 0x100000c, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast1, @private=0xa010101, 0xffffffffffffffff, "c686cf5cb42baa83d4f8967098fb2a6ff8d5d583674a4d6f901cf5463ec4161d", 0xde, 0x6, 0x9, 0xdccc}, 0x3c) write$ppp(r0, 0x0, 0x0) 18:27:54 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_lsm={0x1d, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000180)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000040)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x4, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)=[r0, r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000012c0)) 18:27:54 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8069) 18:27:54 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 56) 18:27:54 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8026) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_lsm={0x1d, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000180)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000040)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x4, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)=[r0, r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000012c0)) 18:27:54 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x82a81, 0x0) write$ppp(r0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_lsm={0x1d, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000180)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000040)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x4, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)=[r0, r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000012c0)) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c6641, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c6641, 0x0) write$ppp(r0, 0x0, 0x0) 18:27:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c6641, 0x0) write$ppp(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c6641, 0x0) (async) write$ppp(r0, 0x0, 0x0) (async) 18:27:54 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8066) 18:27:55 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 18:27:55 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 57) 18:27:55 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff806a) 18:27:55 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8027) 18:27:55 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801d) 18:27:55 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:55 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) [ 2911.956952][T11090] FAULT_INJECTION: forcing a failure. [ 2911.956952][T11090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2911.970272][T11090] CPU: 1 PID: 11090 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 2911.980689][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2911.990746][T11090] Call Trace: [ 2911.994095][T11090] [ 2911.997063][T11090] dump_stack_lvl+0xda/0x130 [ 2912.001732][T11090] dump_stack+0x15/0x20 [ 2912.005908][T11090] should_fail_ex+0x21f/0x230 [ 2912.010608][T11090] __should_fail_alloc_page+0xfd/0x110 [ 2912.016136][T11090] __alloc_pages+0x108/0x340 [ 2912.020874][T11090] alloc_pages_mpol+0xb1/0x1d0 [ 2912.025654][T11090] alloc_pages+0xe0/0x100 [ 2912.030004][T11090] pte_alloc_one+0x32/0xe0 [ 2912.034422][T11090] __pte_alloc+0x33/0x270 [ 2912.038742][T11090] ? __rcu_read_unlock+0x33/0x70 [ 2912.043669][T11090] handle_mm_fault+0x2144/0x2dd0 [ 2912.048622][T11090] ? folio_mark_accessed+0x178/0x190 [ 2912.053926][T11090] __get_user_pages+0x402/0xe40 [ 2912.058775][T11090] __gup_longterm_locked+0xeb7/0x14f0 [ 2912.064133][T11090] ? __rcu_read_unlock+0x4d/0x70 [ 2912.069118][T11090] ? blk_mq_run_hw_queue+0x2a9/0x4c0 [ 2912.074476][T11090] ? __rcu_read_unlock+0x4d/0x70 [ 2912.079437][T11090] ? __rcu_read_lock+0x35/0x50 [ 2912.084246][T11090] ? __pte_offset_map+0xc4/0x140 [ 2912.089166][T11090] internal_get_user_pages_fast+0x197b/0x25a0 [ 2912.095219][T11090] pin_user_pages_fast+0x92/0xe0 [ 2912.100195][T11090] iov_iter_extract_pages+0x26e/0x4c0 [ 2912.105561][T11090] bio_iov_iter_get_pages+0x333/0xb60 [ 2912.110943][T11090] ? bio_alloc_bioset+0x899/0xb10 [ 2912.115960][T11090] iomap_dio_bio_iter+0x7dc/0xbe0 [ 2912.120989][T11090] __iomap_dio_rw+0x8db/0x1090 [ 2912.125914][T11090] iomap_dio_rw+0x40/0x90 [ 2912.130237][T11090] ext4_file_write_iter+0xa8a/0xe10 [ 2912.135440][T11090] vfs_write+0x48a/0x790 [ 2912.139720][T11090] ksys_write+0xeb/0x1a0 [ 2912.143967][T11090] __x64_sys_write+0x42/0x50 [ 2912.148544][T11090] do_syscall_64+0x44/0x110 [ 2912.153105][T11090] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2912.159010][T11090] RIP: 0033:0x7f194e4a0ba9 [ 2912.163405][T11090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2912.183001][T11090] RSP: 002b:00007f194d8230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2912.191441][T11090] RAX: ffffffffffffffda RBX: 00007f194e5bff80 RCX: 00007f194e4a0ba9 [ 2912.199467][T11090] RDX: 00000000ffff8024 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2912.207432][T11090] RBP: 00007f194d823120 R08: 0000000000000000 R09: 0000000000000000 [ 2912.215403][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2912.223371][T11090] R13: 000000000000000b R14: 00007f194e5bff80 R15: 00007ffe16de8428 [ 2912.231384][T11090] 18:27:56 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff801d) 18:27:56 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 58) 18:27:56 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:56 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:56 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:56 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8028) 18:27:56 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff806b) 18:27:56 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (fail_nth: 59) 18:27:56 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) [ 2913.456994][T11117] FAULT_INJECTION: forcing a failure. [ 2913.456994][T11117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2913.470338][T11117] CPU: 1 PID: 11117 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 2913.480788][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2913.490878][T11117] Call Trace: [ 2913.494174][T11117] [ 2913.497096][T11117] dump_stack_lvl+0xda/0x130 [ 2913.501743][T11117] dump_stack+0x15/0x20 [ 2913.505928][T11117] should_fail_ex+0x21f/0x230 [ 2913.510618][T11117] __should_fail_alloc_page+0xfd/0x110 [ 2913.516067][T11117] __alloc_pages+0x108/0x340 [ 2913.520659][T11117] alloc_pages_mpol+0xb1/0x1d0 [ 2913.525433][T11117] alloc_pages+0xe0/0x100 [ 2913.529913][T11117] pte_alloc_one+0x32/0xe0 [ 2913.534360][T11117] __pte_alloc+0x33/0x270 [ 2913.538693][T11117] ? __rcu_read_unlock+0x33/0x70 [ 2913.543665][T11117] handle_mm_fault+0x2144/0x2dd0 [ 2913.548593][T11117] ? folio_mark_accessed+0x178/0x190 [ 2913.553934][T11117] __get_user_pages+0x402/0xe40 [ 2913.558782][T11117] ? sbitmap_get_shallow+0x11c/0x180 [ 2913.564066][T11117] __gup_longterm_locked+0xeb7/0x14f0 [ 2913.569460][T11117] ? dd_prepare_request+0x19/0x30 [ 2913.574505][T11117] ? read_tsc+0x9/0x20 [ 2913.578609][T11117] ? __rcu_read_lock+0x35/0x50 [ 2913.583443][T11117] ? __pte_offset_map+0xc4/0x140 [ 2913.588367][T11117] internal_get_user_pages_fast+0x197b/0x25a0 [ 2913.594489][T11117] pin_user_pages_fast+0x92/0xe0 [ 2913.599409][T11117] iov_iter_extract_pages+0x26e/0x4c0 [ 2913.604783][T11117] bio_iov_iter_get_pages+0x333/0xb60 [ 2913.610267][T11117] ? bio_alloc_bioset+0x899/0xb10 [ 2913.615385][T11117] iomap_dio_bio_iter+0x7dc/0xbe0 [ 2913.620743][T11117] __iomap_dio_rw+0x8db/0x1090 [ 2913.625578][T11117] iomap_dio_rw+0x40/0x90 [ 2913.629893][T11117] ext4_file_write_iter+0xa8a/0xe10 [ 2913.635134][T11117] vfs_write+0x48a/0x790 [ 2913.639363][T11117] ksys_write+0xeb/0x1a0 [ 2913.643635][T11117] __x64_sys_write+0x42/0x50 [ 2913.648291][T11117] do_syscall_64+0x44/0x110 [ 2913.652805][T11117] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2913.658701][T11117] RIP: 0033:0x7f194e4a0ba9 [ 2913.663102][T11117] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2913.682788][T11117] RSP: 002b:00007f194d8230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2913.691195][T11117] RAX: ffffffffffffffda RBX: 00007f194e5bff80 RCX: 00007f194e4a0ba9 [ 2913.699164][T11117] RDX: 00000000ffff8024 RSI: 00000000200000c0 RDI: 0000000000000003 18:27:57 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8303, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x220440, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0x3, 0xfafc}, 0x10, 0x210c5, r0, 0x0, &(0x7f0000000380)=[r5, 0xffffffffffffffff, r7, r4, 0xffffffffffffffff, r8, r6, r14], 0x0, 0x10, 0x7ff}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r18, 0xffffffffffffffff, r19, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) r20 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r20, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:57 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8029) [ 2913.707128][T11117] RBP: 00007f194d823120 R08: 0000000000000000 R09: 0000000000000000 [ 2913.715094][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2913.723120][T11117] R13: 000000000000000b R14: 00007f194e5bff80 R15: 00007ffe16de8428 [ 2913.731095][T11117] 18:27:57 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff806c) 18:27:57 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:27:57 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:57 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:27:58 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (rerun: 32) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8303, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x220440, 0x0) (async, rerun: 64) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0x3, 0xfafc}, 0x10, 0x210c5, r0, 0x0, &(0x7f0000000380)=[r5, 0xffffffffffffffff, r7, r4, 0xffffffffffffffff, r8, r6, r14], 0x0, 0x10, 0x7ff}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r18, 0xffffffffffffffff, r19, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) r20 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r20, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:58 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff802a) 18:27:58 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff806d) 18:27:58 executing program 4: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0/file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000180)={0x80, ""/128}) 18:27:58 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8303, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x220440, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0x3, 0xfafc}, 0x10, 0x210c5, r0, 0x0, &(0x7f0000000380)=[r5, 0xffffffffffffffff, r7, r4, 0xffffffffffffffff, r8, r6, r14], 0x0, 0x10, 0x7ff}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r18, 0xffffffffffffffff, r19, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) (async) r20 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r20, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:58 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:58 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r5, r6, 0xffffffffffffffff, r7, r3, r0, r4, r2, r4], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r2, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r10, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:58 executing program 1: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:27:58 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff802b) 18:27:59 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff806e) 18:27:59 executing program 4: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0/file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000180)={0x80, ""/128}) 18:27:59 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:59 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r5, r6, 0xffffffffffffffff, r7, r3, r0, r4, r2, r4], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r2, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket(0x23, 0x5, 0x45) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r10, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) 18:27:59 executing program 1: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:27:59 executing program 1: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:27:59 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff802c) 18:27:59 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff806f) 18:27:59 executing program 4: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0/file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000180)={0x80, ""/128}) 18:27:59 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, '\x00', r2, r0, 0x4, 0x5, 0x5}, 0x48) 18:28:00 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:00 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r5, r6, 0xffffffffffffffff, r7, r3, r0, r4, r2, r4], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r2, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r10, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:00 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff802d) 18:28:00 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010100000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f}, {0xa, 0x4e21, 0x3, @mcast1, 0x7}, 0x1, {[0xa41, 0x7, 0x5, 0x5, 0x3, 0x5, 0xa1f, 0xfffffffc]}}, 0x5c) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x70, 0x4, 0x101}, {0x4, 0xed, 0x9, 0x3}, {0x9, 0x2, 0xe5, 0x2}, {0x2, 0x0, 0x4, 0x401}]}) 18:28:00 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8070) 18:28:00 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, '\x00', r2, r0, 0x4, 0x5, 0x5}, 0x48) 18:28:00 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, '\x00', r2, r0, 0x4, 0x5, 0x5}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, '\x00', r2, r0, 0x4, 0x5, 0x5}, 0x48) 18:28:01 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff802e) 18:28:01 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, 0x1], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r11}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005b020020000000008b2fc4705ec502c53d0afa47ab5c73900000181100006443a60d61a8fa201402719be8ece00e350249ca20678c80ed75a61044c5650d7fdd3b69f734502d", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r12, r13, 0xffffffffffffffff, r14, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, r11], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0) r16 = ioctl$LOOP_CTL_GET_FREE(r15, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r16) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r16) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r17 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r17, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r17}, 0x18) 18:28:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async, rerun: 64) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, 0x1], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (rerun: 64) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r11}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005b020020000000008b2fc4705ec502c53d0afa47ab5c73900000181100006443a60d61a8fa201402719be8ece00e350249ca20678c80ed75a61044c5650d7fdd3b69f734502d", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r12, r13, 0xffffffffffffffff, r14, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, r11], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0) r16 = ioctl$LOOP_CTL_GET_FREE(r15, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r16) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r16) (async) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) (async) r17 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r17, 0x40309410, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r17}, 0x18) 18:28:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, 0x1], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r11}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005b020020000000008b2fc4705ec502c53d0afa47ab5c73900000181100006443a60d61a8fa201402719be8ece00e350249ca20678c80ed75a61044c5650d7fdd3b69f734502d", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r12, r13, 0xffffffffffffffff, r14, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, r11], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0) (async) r16 = ioctl$LOOP_CTL_GET_FREE(r15, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r16) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r16) (async) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) (async) r17 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r17, 0x40309410, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r17}, 0x18) 18:28:01 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:01 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010100000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f}, {0xa, 0x4e21, 0x3, @mcast1, 0x7}, 0x1, {[0xa41, 0x7, 0x5, 0x5, 0x3, 0x5, 0xa1f, 0xfffffffc]}}, 0x5c) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x70, 0x4, 0x101}, {0x4, 0xed, 0x9, 0x3}, {0x9, 0x2, 0xe5, 0x2}, {0x2, 0x0, 0x4, 0x401}]}) 18:28:01 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010100000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f}, {0xa, 0x4e21, 0x3, @mcast1, 0x7}, 0x1, {[0xa41, 0x7, 0x5, 0x5, 0x3, 0x5, 0xa1f, 0xfffffffc]}}, 0x5c) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x70, 0x4, 0x101}, {0x4, 0xed, 0x9, 0x3}, {0x9, 0x2, 0xe5, 0x2}, {0x2, 0x0, 0x4, 0x401}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) socket$igmp6(0xa, 0x3, 0x2) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010100000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f}, {0xa, 0x4e21, 0x3, @mcast1, 0x7}, 0x1, {[0xa41, 0x7, 0x5, 0x5, 0x3, 0x5, 0xa1f, 0xfffffffc]}}, 0x5c) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x70, 0x4, 0x101}, {0x4, 0xed, 0x9, 0x3}, {0x9, 0x2, 0xe5, 0x2}, {0x2, 0x0, 0x4, 0x401}]}) (async) 18:28:01 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8071) 18:28:01 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mdio_bus', 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000600000000000000f60000006d59f8fffcffffff95000000000000004f264853de8def9e1a93799d6e46105c48d9fcc31daf5ff263e6402b2480f73c3cf09ffdf762485645b5e948216008b6220b887cfcb039f83a284083e67fbf9c263553c3dda90584b50e48a887fb9a92433471ab6a4c46b1a66e03d54de096a44de75b2997692a3c7fc2c246760dbc90a600"/158], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xe, &(0x7f0000000500)=""/14, 0x41100, 0x8, '\x00', 0x0, 0x35, r0, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xd, 0xfa, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000900), &(0x7f0000000b80)=[{0x0, 0x1, 0xb, 0x4}, {0x4, 0x2, 0xd, 0xa}, {0x4, 0x2, 0x10, 0x2}, {0x1, 0x4, 0x2, 0xc}, {0x2, 0x4, 0xa, 0x5}, {0x1, 0x1, 0xd, 0x9}, {0x5, 0x2, 0x5, 0x4}], 0x10, 0xffff}, 0x90) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100ec79cdcfeb152fa30000", @ANYRES32=r3, @ANYBLOB="00d17800000000002e2f66696c653000"]) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r7, 0xffffffffffffffff, r8, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r18 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001800)={{r18}, 0x0, 0x8, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x15f0, 0x8, {0x8, 0xe7, 0x7, 0x6}, [0x4, 0x8, 0x81, 0x7fffffff, 0xb3b3]}}, @name="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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000002005800000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r1, &(0x7f00000003c0)="8def4b16263890a0cf770cecdc7f0cb92241b26e00a4b829d4a5120bfe9a57efea1d570279f699a3c4f490160c2f3eb8fef3db239621632f758a4541aee54cddb719cd97981646215790481678715a8a579ec7130f53dbe4e9993137de5812653f914de70f9a7889", 0xffffffffffffff29) 18:28:01 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mdio_bus', 0x0, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000600000000000000f60000006d59f8fffcffffff95000000000000004f264853de8def9e1a93799d6e46105c48d9fcc31daf5ff263e6402b2480f73c3cf09ffdf762485645b5e948216008b6220b887cfcb039f83a284083e67fbf9c263553c3dda90584b50e48a887fb9a92433471ab6a4c46b1a66e03d54de096a44de75b2997692a3c7fc2c246760dbc90a600"/158], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xe, &(0x7f0000000500)=""/14, 0x41100, 0x8, '\x00', 0x0, 0x35, r0, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xd, 0xfa, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000900), &(0x7f0000000b80)=[{0x0, 0x1, 0xb, 0x4}, {0x4, 0x2, 0xd, 0xa}, {0x4, 0x2, 0x10, 0x2}, {0x1, 0x4, 0x2, 0xc}, {0x2, 0x4, 0xa, 0x5}, {0x1, 0x1, 0xd, 0x9}, {0x5, 0x2, 0x5, 0x4}], 0x10, 0xffff}, 0x90) (async, rerun: 32) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100ec79cdcfeb152fa30000", @ANYRES32=r3, @ANYBLOB="00d17800000000002e2f66696c653000"]) (async, rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async, rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) (async) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r7, 0xffffffffffffffff, r8, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r18 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001800)={{r18}, 0x0, 0x8, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x15f0, 0x8, {0x8, 0xe7, 0x7, 0x6}, [0x4, 0x8, 0x81, 0x7fffffff, 0xb3b3]}}, @name="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"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000002005800000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 64) write$ppp(r1, &(0x7f00000003c0)="8def4b16263890a0cf770cecdc7f0cb92241b26e00a4b829d4a5120bfe9a57efea1d570279f699a3c4f490160c2f3eb8fef3db239621632f758a4541aee54cddb719cd97981646215790481678715a8a579ec7130f53dbe4e9993137de5812653f914de70f9a7889", 0xffffffffffffff29) (rerun: 64) 18:28:01 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mdio_bus', 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000600000000000000f60000006d59f8fffcffffff95000000000000004f264853de8def9e1a93799d6e46105c48d9fcc31daf5ff263e6402b2480f73c3cf09ffdf762485645b5e948216008b6220b887cfcb039f83a284083e67fbf9c263553c3dda90584b50e48a887fb9a92433471ab6a4c46b1a66e03d54de096a44de75b2997692a3c7fc2c246760dbc90a600"/158], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xe, &(0x7f0000000500)=""/14, 0x41100, 0x8, '\x00', 0x0, 0x35, r0, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xd, 0xfa, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000900), &(0x7f0000000b80)=[{0x0, 0x1, 0xb, 0x4}, {0x4, 0x2, 0xd, 0xa}, {0x4, 0x2, 0x10, 0x2}, {0x1, 0x4, 0x2, 0xc}, {0x2, 0x4, 0xa, 0x5}, {0x1, 0x1, 0xd, 0x9}, {0x5, 0x2, 0x5, 0x4}], 0x10, 0xffff}, 0x90) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100ec79cdcfeb152fa30000", @ANYRES32=r3, @ANYBLOB="00d17800000000002e2f66696c653000"]) (rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 32) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) (async) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r13, r7, 0xffffffffffffffff, r8, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) r18 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001800)={{r18}, 0x0, 0x8, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x15f0, 0x8, {0x8, 0xe7, 0x7, 0x6}, [0x4, 0x8, 0x81, 0x7fffffff, 0xb3b3]}}, @name="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"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000002005800000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845000003000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r1, &(0x7f00000003c0)="8def4b16263890a0cf770cecdc7f0cb92241b26e00a4b829d4a5120bfe9a57efea1d570279f699a3c4f490160c2f3eb8fef3db239621632f758a4541aee54cddb719cd97981646215790481678715a8a579ec7130f53dbe4e9993137de5812653f914de70f9a7889", 0xffffffffffffff29) 18:28:01 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff802f) 18:28:02 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:02 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:02 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:02 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:02 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8072) 18:28:02 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8030) 18:28:02 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:02 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:03 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:03 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (rerun: 64) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:03 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x56) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:03 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8073) 18:28:03 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8031) 18:28:03 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:03 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0xc000, 0x103) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:28:03 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:03 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0xfff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x4, 0x103) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:03 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x56) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:04 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8032) 18:28:04 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8074) 18:28:04 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:04 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0xfff) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 32) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x4, 0x103) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:04 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0xfff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x4, 0x103) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0xfff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x4, 0x103) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) 18:28:04 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) linkat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:04 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) linkat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) linkat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:28:04 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) linkat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) linkat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:28:04 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2540, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000200)) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200, 0xc0) linkat(r1, &(0x7f00000000c0)='\x00', r11, &(0x7f0000000180)='./file0\x00', 0x400) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r12 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x22040, 0x8) ioctl$PPPIOCGNPMODE(r12, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x2}) 18:28:04 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8033) 18:28:04 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x56) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:04 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8075) 18:28:05 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:05 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28f65738d9dc61000000", @ANYRES16=r1, @ANYBLOB="080026bd7000fddbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000004a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x814) 18:28:05 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2540, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000200)) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200, 0xc0) linkat(r1, &(0x7f00000000c0)='\x00', r11, &(0x7f0000000180)='./file0\x00', 0x400) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r12 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x22040, 0x8) ioctl$PPPIOCGNPMODE(r12, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x2}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2540, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000200)) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) openat(r0, &(0x7f0000000100)='./file0\x00', 0x200, 0xc0) (async) linkat(r1, &(0x7f00000000c0)='\x00', r11, &(0x7f0000000180)='./file0\x00', 0x400) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x22040, 0x8) (async) ioctl$PPPIOCGNPMODE(r12, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x2}) (async) 18:28:05 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8034) 18:28:05 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080826bdf5e6b541d3c5fb85a06928116c94c6737ca680eacb9e8cc337001cdc", @ANYRES32=r1, @ANYBLOB="0c009900000100005d000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000005) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20008000) 18:28:05 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8076) 18:28:05 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2540, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000200)) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r1, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r11 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200, 0xc0) linkat(r1, &(0x7f00000000c0)='\x00', r11, &(0x7f0000000180)='./file0\x00', 0x400) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r12 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x22040, 0x8) ioctl$PPPIOCGNPMODE(r12, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x2}) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28f65738d9dc61000000", @ANYRES16=r1, @ANYBLOB="080026bd7000fddbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000004a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x814) 18:28:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8035) 18:28:06 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080826bdf5e6b541d3c5fb85a06928116c94c6737ca680eacb9e8cc337001cdc", @ANYRES32=r1, @ANYBLOB="0c009900000100005d000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000005) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20008000) 18:28:06 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = socket(0x17, 0x6, 0x2) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8077) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28f65738d9dc61000000", @ANYRES16=r1, @ANYBLOB="080026bd7000fddbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000004a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x814) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28f65738d9dc61000000", @ANYRES16=r1, @ANYBLOB="080026bd7000fddbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000004a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x814) (async) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:06 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:07 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8036) 18:28:07 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = socket(0x17, 0x6, 0x2) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) socket(0x17, 0x6, 0x2) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:28:07 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080826bdf5e6b541d3c5fb85a06928116c94c6737ca680eacb9e8cc337001cdc", @ANYRES32=r1, @ANYBLOB="0c009900000100005d000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000005) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20008000) 18:28:07 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8078) 18:28:07 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 18:28:07 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:07 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8037) 18:28:07 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async, rerun: 64) r1 = socket(0x17, 0x6, 0x2) (rerun: 64) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:07 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:08 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x103) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 18:28:08 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8079) 18:28:08 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:08 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8038) 18:28:08 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 18:28:08 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:08 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:08 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x103) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 18:28:08 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807a) 18:28:08 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:09 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8039) 18:28:09 executing program 1: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x2d, 0x2}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 18:28:09 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:09 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 18:28:09 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async, rerun: 64) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 18:28:09 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$ppp(r0, &(0x7f00000000c0)="558f7e18d42964d7248374b86005e178ce3d4076bde5fd721b1bb8409b365720449533e3dc5682101fd4b3bed4ef36d4aaa0bde3fe578b8a5bf1ed330c2f9df75ec4865e9645a6cb7df1639dfd1a52541c85b5500f804d63558cf29ff3b4188b4d35c4d7e8b67da3a4ad001dacd87516", 0x70) 18:28:09 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$ppp(r0, &(0x7f00000000c0)="558f7e18d42964d7248374b86005e178ce3d4076bde5fd721b1bb8409b365720449533e3dc5682101fd4b3bed4ef36d4aaa0bde3fe578b8a5bf1ed330c2f9df75ec4865e9645a6cb7df1639dfd1a52541c85b5500f804d63558cf29ff3b4188b4d35c4d7e8b67da3a4ad001dacd87516", 0x70) 18:28:09 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$ppp(r0, &(0x7f00000000c0)="558f7e18d42964d7248374b86005e178ce3d4076bde5fd721b1bb8409b365720449533e3dc5682101fd4b3bed4ef36d4aaa0bde3fe578b8a5bf1ed330c2f9df75ec4865e9645a6cb7df1639dfd1a52541c85b5500f804d63558cf29ff3b4188b4d35c4d7e8b67da3a4ad001dacd87516", 0x70) 18:28:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r12, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x51}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r13, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r14 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r14, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r14, 0xc0189371, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000180000f16fbfcbb0434e5e6b0d952d96457508fb1890e6e2f621c247848e3f913f773131a01d25451f4cf4a63822c7413427113902204449a33933ee8624fc89f324d7ecec12672d106aa4f1f032808341d2235e43c5c3f96043b8bcc5e43ba5d086507d7eab6d1e9f34f068985333a70abb522ab95b890000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SCSI_IOCTL_PROBE_HOST(r15, 0x5385, &(0x7f0000000080)={0xa7, ""/167}) 18:28:09 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff803a) 18:28:09 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807b) 18:28:09 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:10 executing program 1: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x2d, 0x2}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 18:28:10 executing program 1: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x2d, 0x2}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 18:28:10 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:10 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:10 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff803b) 18:28:10 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) (async, rerun: 64) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (rerun: 64) 18:28:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 64) r11 = socket(0x23, 0x5, 0x45) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r12, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x51}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, 0x0) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r13, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (rerun: 32) r14 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r14, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r14, 0xc0189371, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000180000f16fbfcbb0434e5e6b0d952d96457508fb1890e6e2f621c247848e3f913f773131a01d25451f4cf4a63822c7413427113902204449a33933ee8624fc89f324d7ecec12672d106aa4f1f032808341d2235e43c5c3f96043b8bcc5e43ba5d086507d7eab6d1e9f34f068985333a70abb522ab95b890000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SCSI_IOCTL_PROBE_HOST(r15, 0x5385, &(0x7f0000000080)={0xa7, ""/167}) 18:28:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r12, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x51}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r13, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r14, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r14, 0xc0189371, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000180000f16fbfcbb0434e5e6b0d952d96457508fb1890e6e2f621c247848e3f913f773131a01d25451f4cf4a63822c7413427113902204449a33933ee8624fc89f324d7ecec12672d106aa4f1f032808341d2235e43c5c3f96043b8bcc5e43ba5d086507d7eab6d1e9f34f068985333a70abb522ab95b890000", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SCSI_IOCTL_PROBE_HOST(r15, 0x5385, &(0x7f0000000080)={0xa7, ""/167}) 18:28:10 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807c) 18:28:10 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x9) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:10 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:11 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff803c) 18:28:11 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845030003000000000000000076840018010000696c6c25207b1af8ff00000000bea100000000000007010000f8ffffffb70200e507000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r1, &(0x7f0000000000)='./file0\x00', r10, &(0x7f0000000080)='./file0/file0\x00', 0x1400) write$ppp(r0, &(0x7f00000000c0)="f8d32fb455a49f456d6e9dffffffe5e8119fe9c650f87fa3af1dd5c949bb52f4a64299a25bdbb7c0c71fa45fbe41a3fba0e0a4946905e26221d03d5aa73ab7e5a2d05b92c6149085eab5e1e4c089781f5fe465c1835516cb1450c3e82c414268bd7fbb3e", 0x64) 18:28:11 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845030003000000000000000076840018010000696c6c25207b1af8ff00000000bea100000000000007010000f8ffffffb70200e507000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) linkat(r1, &(0x7f0000000000)='./file0\x00', r10, &(0x7f0000000080)='./file0/file0\x00', 0x1400) write$ppp(r0, &(0x7f00000000c0)="f8d32fb455a49f456d6e9dffffffe5e8119fe9c650f87fa3af1dd5c949bb52f4a64299a25bdbb7c0c71fa45fbe41a3fba0e0a4946905e26221d03d5aa73ab7e5a2d05b92c6149085eab5e1e4c089781f5fe465c1835516cb1450c3e82c414268bd7fbb3e", 0x64) 18:28:11 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=0x1, @ANYBLOB="00000000f9ffffff1845030003000000000000000076840018010000696c6c25207b1af8ff00000000bea100000000000007010000f8ffffffb70200e507000000b7030000000000008500000006000000182b0000", @ANYRES32, @ANYBLOB="00000000070000008520000000000000180000000500000000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) (async) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r13, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) linkat(r1, &(0x7f0000000000)='./file0\x00', r10, &(0x7f0000000080)='./file0/file0\x00', 0x1400) write$ppp(r0, &(0x7f00000000c0)="f8d32fb455a49f456d6e9dffffffe5e8119fe9c650f87fa3af1dd5c949bb52f4a64299a25bdbb7c0c71fa45fbe41a3fba0e0a4946905e26221d03d5aa73ab7e5a2d05b92c6149085eab5e1e4c089781f5fe465c1835516cb1450c3e82c414268bd7fbb3e", 0x64) 18:28:11 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) r2 = geteuid() r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r3) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000001c0)={'fscrypt:', @auto=[0x66, 0x33, 0x31, 0x64, 0x38, 0x61, 0x5d, 0x33, 0x62, 0x30, 0x0, 0x7f, 0x39, 0x31, 0x35, 0x62]}, &(0x7f0000000200)={0x0, "1549df8739795805d0d0a51e6bc635bd4def2715928509aa0999c7026e18ff28b3f02d7e2bdd4bc6c38b1b658d12e15a4761fb3f3cfae3c8f1be9dd7f5869177", 0x2d}, 0x48, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r5, 0x2, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r9, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r11, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r9, 0x4, 0x10}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x3, '\x00', 0x0, r8, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r13}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r14, r15, 0xffffffffffffffff, r16, r12, 0xffffffffffffffff, r13, r11, r13], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x1, 0x9, 0x5}, {0x4, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x5}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r11, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x2, 0x9, 0x1040, r0, 0x7fff, '\x00', r7, r8, 0x0, 0x4, 0x3, 0xc}, 0x48) 18:28:11 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807d) 18:28:11 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:11 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:11 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff803d) 18:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4008080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = openat(r2, &(0x7f0000000080)='./file0\x00', 0xb81, 0x0) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000040)) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4008080) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = openat(r2, &(0x7f0000000080)='./file0\x00', 0xb81, 0x0) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000040)) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4008080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = openat(r2, &(0x7f0000000080)='./file0\x00', 0xb81, 0x0) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000040)) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4008080) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) openat(r2, &(0x7f0000000080)='./file0\x00', 0xb81, 0x0) (async) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000040)) (async) write$ppp(r11, &(0x7f00000000c0)="a5", 0xffff8007) (async) 18:28:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="008b90000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xe0080, 0x0) mknodat$null(r9, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r10 = socket(0x23, 0x5, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r11, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c8, 0x0, 0x424, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x111, 0x2a, [@challenge={0x10, 0x1, 0x4d}, @fast_bss_trans={0x37, 0xb3, {0x6, 0x4, "c3da2672633d5b752d0a54c5c3a4fbef", "1f1922c76cbd2cd862d1008e626f6fa885834f3d6096de6409e1f3bb273b259d", "d97045218359ea043347982e28cbc4899d887a862574a64fb8009cbf734d204d", [{0x3, 0xb, "02a759f7e651c91556fc72"}, {0x1, 0x1a, "d8ce5b64b62bd94b232d4f286b4c627d743305845a0c3d1e445a"}, {0x1, 0x1f, "5869131d85725171f78e5402ed6e4d11e6fb01d53a95b321018f56474c5042"}, {0x1, 0x15, "cce2d7c43b40cfc2fcf26a33d92a52fb84b2fb04af"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x1, 0x4e}}, @cf={0x4, 0x6, {0x6, 0xe3, 0x8001, 0x9}}, @ssid={0x0, 0x1b, @random="3c5867116e6824a6d89468dd529927e70f68359a96f8a11852cfba"}, @rann={0x7e, 0x15, {{0x0, 0x27}, 0x40, 0x9, @broadcast, 0x100, 0x1ff, 0x401}}, @cf={0x4, 0x6, {0x4, 0x64, 0x6, 0x1}}, @chsw_timing={0x68, 0x4, {0x8000, 0x1000}}, @dsss={0x3, 0x1, 0x28}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7b}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x401}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xb66}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000001}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2c}, @NL80211_BAND_LC={0x8, 0x5, 0x81}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x256}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8fb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r12, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="008b90000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xe0080, 0x0) mknodat$null(r9, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r10 = socket(0x23, 0x5, 0x45) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r11, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c8, 0x0, 0x424, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x111, 0x2a, [@challenge={0x10, 0x1, 0x4d}, @fast_bss_trans={0x37, 0xb3, {0x6, 0x4, "c3da2672633d5b752d0a54c5c3a4fbef", "1f1922c76cbd2cd862d1008e626f6fa885834f3d6096de6409e1f3bb273b259d", "d97045218359ea043347982e28cbc4899d887a862574a64fb8009cbf734d204d", [{0x3, 0xb, "02a759f7e651c91556fc72"}, {0x1, 0x1a, "d8ce5b64b62bd94b232d4f286b4c627d743305845a0c3d1e445a"}, {0x1, 0x1f, "5869131d85725171f78e5402ed6e4d11e6fb01d53a95b321018f56474c5042"}, {0x1, 0x15, "cce2d7c43b40cfc2fcf26a33d92a52fb84b2fb04af"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x1, 0x4e}}, @cf={0x4, 0x6, {0x6, 0xe3, 0x8001, 0x9}}, @ssid={0x0, 0x1b, @random="3c5867116e6824a6d89468dd529927e70f68359a96f8a11852cfba"}, @rann={0x7e, 0x15, {{0x0, 0x27}, 0x40, 0x9, @broadcast, 0x100, 0x1ff, 0x401}}, @cf={0x4, 0x6, {0x4, 0x64, 0x6, 0x1}}, @chsw_timing={0x68, 0x4, {0x8000, 0x1000}}, @dsss={0x3, 0x1, 0x28}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7b}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x401}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xb66}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000001}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2c}, @NL80211_BAND_LC={0x8, 0x5, 0x81}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x256}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8fb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r12, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="008b90000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xe0080, 0x0) mknodat$null(r9, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r10 = socket(0x23, 0x5, 0x45) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25430000000800024f", @ANYRES32=r11, @ANYBLOB="0c00990008000000180000000c00580000000000000000000c0058007c000000000000000c00580036000000000000000c00580059000000000000000c0058005e000000000000000c00580050000000000000000c0058001e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c080) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c8, 0x0, 0x424, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x111, 0x2a, [@challenge={0x10, 0x1, 0x4d}, @fast_bss_trans={0x37, 0xb3, {0x6, 0x4, "c3da2672633d5b752d0a54c5c3a4fbef", "1f1922c76cbd2cd862d1008e626f6fa885834f3d6096de6409e1f3bb273b259d", "d97045218359ea043347982e28cbc4899d887a862574a64fb8009cbf734d204d", [{0x3, 0xb, "02a759f7e651c91556fc72"}, {0x1, 0x1a, "d8ce5b64b62bd94b232d4f286b4c627d743305845a0c3d1e445a"}, {0x1, 0x1f, "5869131d85725171f78e5402ed6e4d11e6fb01d53a95b321018f56474c5042"}, {0x1, 0x15, "cce2d7c43b40cfc2fcf26a33d92a52fb84b2fb04af"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x1, 0x4e}}, @cf={0x4, 0x6, {0x6, 0xe3, 0x8001, 0x9}}, @ssid={0x0, 0x1b, @random="3c5867116e6824a6d89468dd529927e70f68359a96f8a11852cfba"}, @rann={0x7e, 0x15, {{0x0, 0x27}, 0x40, 0x9, @broadcast, 0x100, 0x1ff, 0x401}}, @cf={0x4, 0x6, {0x4, 0x64, 0x6, 0x1}}, @chsw_timing={0x68, 0x4, {0x8000, 0x1000}}, @dsss={0x3, 0x1, 0x28}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7b}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x401}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xb66}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000001}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2c}, @NL80211_BAND_LC={0x8, 0x5, 0x81}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x256}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8fb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r12, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:11 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40942, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x3, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r19, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x4, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6, r12, r13, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:12 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) (async) r2 = geteuid() (async) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, r2, r3) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000001c0)={'fscrypt:', @auto=[0x66, 0x33, 0x31, 0x64, 0x38, 0x61, 0x5d, 0x33, 0x62, 0x30, 0x0, 0x7f, 0x39, 0x31, 0x35, 0x62]}, &(0x7f0000000200)={0x0, "1549df8739795805d0d0a51e6bc635bd4def2715928509aa0999c7026e18ff28b3f02d7e2bdd4bc6c38b1b658d12e15a4761fb3f3cfae3c8f1be9dd7f5869177", 0x2d}, 0x48, r1) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) (async) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r5, 0x2, r6) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r9, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r11, 0xffffffffffffffff}, 0x4) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r9, 0x4, 0x10}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x3, '\x00', 0x0, r8, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r13}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r14, r15, 0xffffffffffffffff, r16, r12, 0xffffffffffffffff, r13, r11, r13], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x1, 0x9, 0x5}, {0x4, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x5}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r11, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x2, 0x9, 0x1040, r0, 0x7fff, '\x00', r7, r8, 0x0, 0x4, 0x3, 0xc}, 0x48) 18:28:12 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:12 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:12 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) 18:28:12 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff803e) 18:28:12 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:12 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) (async, rerun: 32) r2 = geteuid() (async, rerun: 32) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) (async) keyctl$get_persistent(0x16, r2, r3) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000001c0)={'fscrypt:', @auto=[0x66, 0x33, 0x31, 0x64, 0x38, 0x61, 0x5d, 0x33, 0x62, 0x30, 0x0, 0x7f, 0x39, 0x31, 0x35, 0x62]}, &(0x7f0000000200)={0x0, "1549df8739795805d0d0a51e6bc635bd4def2715928509aa0999c7026e18ff28b3f02d7e2bdd4bc6c38b1b658d12e15a4761fb3f3cfae3c8f1be9dd7f5869177", 0x2d}, 0x48, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r5, 0x2, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r9, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r11, 0xffffffffffffffff}, 0x4) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r9, 0x4, 0x10}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x3, '\x00', 0x0, r8, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r13}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r14, r15, 0xffffffffffffffff, r16, r12, 0xffffffffffffffff, r13, r11, r13], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x1, 0x9, 0x5}, {0x4, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x5}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r11, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x2, 0x9, 0x1040, r0, 0x7fff, '\x00', r7, r8, 0x0, 0x4, 0x3, 0xc}, 0x48) 18:28:12 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40942, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x3, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r19, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r20}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x4, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6, r12, r13, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:12 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:12 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, 0x0, 0x0) 18:28:12 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8082) 18:28:12 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200102, 0xb0) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x103) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x18, r11}, 0x18) write$ppp(r0, &(0x7f0000000180)="8ccafcedeabb3ffdf9022b72b500ed814dbce4ddfb0100eaf97c03e5b276825d74bd1b010276effa8fc5f996c910434885cae3d2ac2e3aad0f9e466745971de7bccf43612598a80af0adf6590cffa7a15cfd4982af0c30ab2fe12911551736476be82ddfd07e09cd9f55ee7119363aeb694fda27153fc4ebb004908270b1282c09af869b5eb1fb931bcb978b9a465c6069ed8cfa1524d2e0cce97d1d2e545ddae0d75ffbb77671aba9288490d6ae6d30bbfc6b98ee0d6f199fff0e17438d299dd3efa915cf6c61c32baf3ae2", 0xcc) 18:28:12 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40942, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r11, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r13, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r11, 0x4, 0x10}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', 0x0, r10, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r15}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r16, r17, 0xffffffffffffffff, r18, r14, r10, r15, r13, r15], &(0x7f0000000e00)=[{0x1, 0x3, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r19, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x4, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6, r12, r13, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:12 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, 0x0, 0x0) 18:28:12 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, 0x0, 0x0) 18:28:13 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) 18:28:13 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200102, 0xb0) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x103) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000002c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x18, r11}, 0x18) (async) write$ppp(r0, &(0x7f0000000180)="8ccafcedeabb3ffdf9022b72b500ed814dbce4ddfb0100eaf97c03e5b276825d74bd1b010276effa8fc5f996c910434885cae3d2ac2e3aad0f9e466745971de7bccf43612598a80af0adf6590cffa7a15cfd4982af0c30ab2fe12911551736476be82ddfd07e09cd9f55ee7119363aeb694fda27153fc4ebb004908270b1282c09af869b5eb1fb931bcb978b9a465c6069ed8cfa1524d2e0cce97d1d2e545ddae0d75ffbb77671aba9288490d6ae6d30bbfc6b98ee0d6f199fff0e17438d299dd3efa915cf6c61c32baf3ae2", 0xcc) 18:28:13 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, &(0x7f00000000c0), 0x0) 18:28:13 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8041) 18:28:13 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0xfffff727}, 0x90) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x2) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f0000000080)=0x1000000) 18:28:13 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8083) 18:28:13 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, &(0x7f00000000c0), 0x0) 18:28:13 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200102, 0xb0) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x103) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000002c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x18, r11}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x18, r11}, 0x18) write$ppp(r0, &(0x7f0000000180)="8ccafcedeabb3ffdf9022b72b500ed814dbce4ddfb0100eaf97c03e5b276825d74bd1b010276effa8fc5f996c910434885cae3d2ac2e3aad0f9e466745971de7bccf43612598a80af0adf6590cffa7a15cfd4982af0c30ab2fe12911551736476be82ddfd07e09cd9f55ee7119363aeb694fda27153fc4ebb004908270b1282c09af869b5eb1fb931bcb978b9a465c6069ed8cfa1524d2e0cce97d1d2e545ddae0d75ffbb77671aba9288490d6ae6d30bbfc6b98ee0d6f199fff0e17438d299dd3efa915cf6c61c32baf3ae2", 0xcc) 18:28:13 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) write$ppp(r0, &(0x7f00000000c0), 0x0) 18:28:13 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xa}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c}, 0x4008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x2}) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:13 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:13 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) 18:28:13 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x12200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffc}}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101d81, 0x10) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:13 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x12200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffc}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffc}}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101d81, 0x10) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:13 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x12200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffc}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffc}}, './file0\x00'}) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101d81, 0x10) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:13 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:14 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0xfffff727}, 0x90) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x2) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f0000000080)=0x1000000) 18:28:14 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8084) 18:28:14 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8042) 18:28:14 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xa}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c}, 0x4008004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x2}) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:14 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:14 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 32) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (rerun: 64) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xa}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c}, 0x4008004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x2}) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:14 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x400) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) (async) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:14 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x400) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) (async) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) (async) 18:28:14 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:14 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8043) 18:28:15 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8085) 18:28:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "72aa181fb96f0dd6794f9cc37fe7c7d0"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20044080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:15 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (rerun: 64) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (rerun: 32) 18:28:15 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8044) 18:28:15 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (rerun: 32) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r10}, 0x18) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0xfffff727}, 0x90) (async) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x2) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f0000000080)=0x1000000) 18:28:15 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "72aa181fb96f0dd6794f9cc37fe7c7d0"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20044080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "72aa181fb96f0dd6794f9cc37fe7c7d0"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20044080) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) (async) 18:28:15 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8086) 18:28:15 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x131) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r4, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8045) 18:28:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "72aa181fb96f0dd6794f9cc37fe7c7d0"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20044080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8087) 18:28:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x131) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (rerun: 32) write$ppp(r4, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x131) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (rerun: 64) write$ppp(r4, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x101200, 0x86) bind$isdn_base(r2, &(0x7f0000000100)={0x22, 0x0, 0x9, 0x1, 0x1}, 0x6) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000140)=@raw=[@generic={0xf0, 0xa, 0x4, 0x4, 0x1f}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x7, 0x1000, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000280)=[{0x1, 0x3, 0x7, 0x5}], 0x10, 0x9}, 0x90) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) keyctl$negate(0xd, r5, 0x401, r4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r0, r7, r3, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0xeacc, 0xbb, &(0x7f0000000240)=""/187, 0x41000, 0x18, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[{0x1, 0x4, 0x4, 0xc}, {0x1, 0x3, 0x8, 0xc}, {0x2, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x6, 0x6}, {0x0, 0x5, 0x2, 0xa}, {0x5, 0x3, 0xe, 0x9}, {0x1, 0x4, 0x5, 0x3}, {0x3, 0x1, 0x2, 0x3}, {0x0, 0x5, 0x6}], 0x10, 0x4}, 0x90) write$ppp(r12, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8046) 18:28:17 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="7d92846599bcc77b5cc73d62ee58ed7e60b1272cd8cf66396cfa91a2732f9f47589f0e651cc6c788812295f0e078819ad642157fc6b3584e62498b5e3519f9f7ac6d7c6ebd348a60c0e9ddd316ed", 0x4e, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000480)=[{&(0x7f0000000180)="5e3b8bb9e6bd69cec9e1bd99be7420064ac51fc9b07033cfddc3a5107239df5f9493e46cb219a8b8bd4dce8fe710042ebb45a260b9ef19a36460", 0x3a}, {&(0x7f00000001c0)="ac22957fcd8adc54c20d79fc29e2623b84775319d809ad7e979d864c9e7e1ce84ce1472e148cab76c4e41d57e5b749eeae4085286b32e8667e6d692a7bde75af3c926dfceeeb518c1b250d69c22afb92d6ac932df8a510cdff9c47099cba8f4d8091eaa5d90ef7a064e318d4e2d4474b9f0950fa35841d9e695b254b84cb646011e0dc77ddffa76f0a46b307618890b8cc7aa1924242f2940c36801cf961", 0x9e}, {&(0x7f0000000280)="0044410e39a276abaf8f28ec8025874b9128cd9de78566d5b0b0a27f7d1e0bc12b40900d2732cb124ebe9d83918395c043aa04969e12f4a762bd178ae1c42db14ef6fc876cb04db054831c8133b35a81be21d8603814db1fdb02d8f640771d7bb756622f9dcd82356a29a5f05b58ba37df878b34f41161e4e2a32ef6005fdc104eee04668c905941afd436ba695b9ab567255b9921f499e9ff61cd5ea1a5ca2250", 0xa1}, {&(0x7f0000000340)="289b1afacf0e760939c4ce9e32168492cd71af6e009d089bb7e9c259b8d57382343857fa37b273260c60488ba930a7e0ca0051120efb388e52e21dc5efa5137a1c4bedab420acd77002afb399ff7dd920fae23a7cadcdfe9f081990f392838d21f8348320ad1c26f923cf26d39f0bf471b6ee2cbd9bd5db699d5a581110aee8d0ae13b0026fe2e3404e3b8c889a69c584b8a212400cc1f4fabbe5c64267d16ff2740862446a916b79947e0f479d7771e1d5c90c631ef5a5e97b37a0dda0c8322", 0xc0}, {&(0x7f0000000400)="f518d2ae4573af35520618174c0c71e4707dc6153d43afd268713dc316eedacfcbb3ab84eb90bed4fc1699b423303c018c118d98dbcadb947a15fbb93f05d30d42a1bcae9cee88b5ce", 0x49}], 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) r2 = openat(r1, &(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) keyctl$update(0x2, r0, 0x0, 0x0) 18:28:17 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8088) 18:28:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) (rerun: 32) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r4, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) keyctl$negate(0xd, r5, 0x401, r4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r0, r7, r3, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0xeacc, 0xbb, &(0x7f0000000240)=""/187, 0x41000, 0x18, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[{0x1, 0x4, 0x4, 0xc}, {0x1, 0x3, 0x8, 0xc}, {0x2, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x6, 0x6}, {0x0, 0x5, 0x2, 0xa}, {0x5, 0x3, 0xe, 0x9}, {0x1, 0x4, 0x5, 0x3}, {0x3, 0x1, 0x2, 0x3}, {0x0, 0x5, 0x6}], 0x10, 0x4}, 0x90) (async) write$ppp(r12, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x101200, 0x86) bind$isdn_base(r2, &(0x7f0000000100)={0x22, 0x0, 0x9, 0x1, 0x1}, 0x6) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000140)=@raw=[@generic={0xf0, 0xa, 0x4, 0x4, 0x1f}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x7, 0x1000, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000280)=[{0x1, 0x3, 0x7, 0x5}], 0x10, 0x9}, 0x90) 18:28:17 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="7d92846599bcc77b5cc73d62ee58ed7e60b1272cd8cf66396cfa91a2732f9f47589f0e651cc6c788812295f0e078819ad642157fc6b3584e62498b5e3519f9f7ac6d7c6ebd348a60c0e9ddd316ed", 0x4e, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000480)=[{&(0x7f0000000180)="5e3b8bb9e6bd69cec9e1bd99be7420064ac51fc9b07033cfddc3a5107239df5f9493e46cb219a8b8bd4dce8fe710042ebb45a260b9ef19a36460", 0x3a}, {&(0x7f00000001c0)="ac22957fcd8adc54c20d79fc29e2623b84775319d809ad7e979d864c9e7e1ce84ce1472e148cab76c4e41d57e5b749eeae4085286b32e8667e6d692a7bde75af3c926dfceeeb518c1b250d69c22afb92d6ac932df8a510cdff9c47099cba8f4d8091eaa5d90ef7a064e318d4e2d4474b9f0950fa35841d9e695b254b84cb646011e0dc77ddffa76f0a46b307618890b8cc7aa1924242f2940c36801cf961", 0x9e}, {&(0x7f0000000280)="0044410e39a276abaf8f28ec8025874b9128cd9de78566d5b0b0a27f7d1e0bc12b40900d2732cb124ebe9d83918395c043aa04969e12f4a762bd178ae1c42db14ef6fc876cb04db054831c8133b35a81be21d8603814db1fdb02d8f640771d7bb756622f9dcd82356a29a5f05b58ba37df878b34f41161e4e2a32ef6005fdc104eee04668c905941afd436ba695b9ab567255b9921f499e9ff61cd5ea1a5ca2250", 0xa1}, {&(0x7f0000000340)="289b1afacf0e760939c4ce9e32168492cd71af6e009d089bb7e9c259b8d57382343857fa37b273260c60488ba930a7e0ca0051120efb388e52e21dc5efa5137a1c4bedab420acd77002afb399ff7dd920fae23a7cadcdfe9f081990f392838d21f8348320ad1c26f923cf26d39f0bf471b6ee2cbd9bd5db699d5a581110aee8d0ae13b0026fe2e3404e3b8c889a69c584b8a212400cc1f4fabbe5c64267d16ff2740862446a916b79947e0f479d7771e1d5c90c631ef5a5e97b37a0dda0c8322", 0xc0}, {&(0x7f0000000400)="f518d2ae4573af35520618174c0c71e4707dc6153d43afd268713dc316eedacfcbb3ab84eb90bed4fc1699b423303c018c118d98dbcadb947a15fbb93f05d30d42a1bcae9cee88b5ce", 0x49}], 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) r2 = openat(r1, &(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) keyctl$update(0x2, r0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="7d92846599bcc77b5cc73d62ee58ed7e60b1272cd8cf66396cfa91a2732f9f47589f0e651cc6c788812295f0e078819ad642157fc6b3584e62498b5e3519f9f7ac6d7c6ebd348a60c0e9ddd316ed", 0x4e, 0xffffffffffffffff) (async) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000480)=[{&(0x7f0000000180)="5e3b8bb9e6bd69cec9e1bd99be7420064ac51fc9b07033cfddc3a5107239df5f9493e46cb219a8b8bd4dce8fe710042ebb45a260b9ef19a36460", 0x3a}, {&(0x7f00000001c0)="ac22957fcd8adc54c20d79fc29e2623b84775319d809ad7e979d864c9e7e1ce84ce1472e148cab76c4e41d57e5b749eeae4085286b32e8667e6d692a7bde75af3c926dfceeeb518c1b250d69c22afb92d6ac932df8a510cdff9c47099cba8f4d8091eaa5d90ef7a064e318d4e2d4474b9f0950fa35841d9e695b254b84cb646011e0dc77ddffa76f0a46b307618890b8cc7aa1924242f2940c36801cf961", 0x9e}, {&(0x7f0000000280)="0044410e39a276abaf8f28ec8025874b9128cd9de78566d5b0b0a27f7d1e0bc12b40900d2732cb124ebe9d83918395c043aa04969e12f4a762bd178ae1c42db14ef6fc876cb04db054831c8133b35a81be21d8603814db1fdb02d8f640771d7bb756622f9dcd82356a29a5f05b58ba37df878b34f41161e4e2a32ef6005fdc104eee04668c905941afd436ba695b9ab567255b9921f499e9ff61cd5ea1a5ca2250", 0xa1}, {&(0x7f0000000340)="289b1afacf0e760939c4ce9e32168492cd71af6e009d089bb7e9c259b8d57382343857fa37b273260c60488ba930a7e0ca0051120efb388e52e21dc5efa5137a1c4bedab420acd77002afb399ff7dd920fae23a7cadcdfe9f081990f392838d21f8348320ad1c26f923cf26d39f0bf471b6ee2cbd9bd5db699d5a581110aee8d0ae13b0026fe2e3404e3b8c889a69c584b8a212400cc1f4fabbe5c64267d16ff2740862446a916b79947e0f479d7771e1d5c90c631ef5a5e97b37a0dda0c8322", 0xc0}, {&(0x7f0000000400)="f518d2ae4573af35520618174c0c71e4707dc6153d43afd268713dc316eedacfcbb3ab84eb90bed4fc1699b423303c018c118d98dbcadb947a15fbb93f05d30d42a1bcae9cee88b5ce", 0x49}], 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) (async) openat(r1, &(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) (async) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) (async) keyctl$update(0x2, r0, 0x0, 0x0) (async) 18:28:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r4, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) keyctl$negate(0xd, r5, 0x401, r4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r0, r7, r3, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0xeacc, 0xbb, &(0x7f0000000240)=""/187, 0x41000, 0x18, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[{0x1, 0x4, 0x4, 0xc}, {0x1, 0x3, 0x8, 0xc}, {0x2, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x6, 0x6}, {0x0, 0x5, 0x2, 0xa}, {0x5, 0x3, 0xe, 0x9}, {0x1, 0x4, 0x5, 0x3}, {0x3, 0x1, 0x2, 0x3}, {0x0, 0x5, 0x6}], 0x10, 0x4}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0xeacc, 0xbb, &(0x7f0000000240)=""/187, 0x41000, 0x18, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[{0x1, 0x4, 0x4, 0xc}, {0x1, 0x3, 0x8, 0xc}, {0x2, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x6, 0x6}, {0x0, 0x5, 0x2, 0xa}, {0x5, 0x3, 0xe, 0x9}, {0x1, 0x4, 0x5, 0x3}, {0x3, 0x1, 0x2, 0x3}, {0x0, 0x5, 0x6}], 0x10, 0x4}, 0x90) write$ppp(r12, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="7d92846599bcc77b5cc73d62ee58ed7e60b1272cd8cf66396cfa91a2732f9f47589f0e651cc6c788812295f0e078819ad642157fc6b3584e62498b5e3519f9f7ac6d7c6ebd348a60c0e9ddd316ed", 0x4e, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000480)=[{&(0x7f0000000180)="5e3b8bb9e6bd69cec9e1bd99be7420064ac51fc9b07033cfddc3a5107239df5f9493e46cb219a8b8bd4dce8fe710042ebb45a260b9ef19a36460", 0x3a}, {&(0x7f00000001c0)="ac22957fcd8adc54c20d79fc29e2623b84775319d809ad7e979d864c9e7e1ce84ce1472e148cab76c4e41d57e5b749eeae4085286b32e8667e6d692a7bde75af3c926dfceeeb518c1b250d69c22afb92d6ac932df8a510cdff9c47099cba8f4d8091eaa5d90ef7a064e318d4e2d4474b9f0950fa35841d9e695b254b84cb646011e0dc77ddffa76f0a46b307618890b8cc7aa1924242f2940c36801cf961", 0x9e}, {&(0x7f0000000280)="0044410e39a276abaf8f28ec8025874b9128cd9de78566d5b0b0a27f7d1e0bc12b40900d2732cb124ebe9d83918395c043aa04969e12f4a762bd178ae1c42db14ef6fc876cb04db054831c8133b35a81be21d8603814db1fdb02d8f640771d7bb756622f9dcd82356a29a5f05b58ba37df878b34f41161e4e2a32ef6005fdc104eee04668c905941afd436ba695b9ab567255b9921f499e9ff61cd5ea1a5ca2250", 0xa1}, {&(0x7f0000000340)="289b1afacf0e760939c4ce9e32168492cd71af6e009d089bb7e9c259b8d57382343857fa37b273260c60488ba930a7e0ca0051120efb388e52e21dc5efa5137a1c4bedab420acd77002afb399ff7dd920fae23a7cadcdfe9f081990f392838d21f8348320ad1c26f923cf26d39f0bf471b6ee2cbd9bd5db699d5a581110aee8d0ae13b0026fe2e3404e3b8c889a69c584b8a212400cc1f4fabbe5c64267d16ff2740862446a916b79947e0f479d7771e1d5c90c631ef5a5e97b37a0dda0c8322", 0xc0}, {&(0x7f0000000400)="f518d2ae4573af35520618174c0c71e4707dc6153d43afd268713dc316eedacfcbb3ab84eb90bed4fc1699b423303c018c118d98dbcadb947a15fbb93f05d30d42a1bcae9cee88b5ce", 0x49}], 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) openat(r1, &(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) (async) r2 = openat(r1, &(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) (async) write$ppp(r2, &(0x7f00000000c0)="a5", 0xffff8024) keyctl$update(0x2, r0, 0x0, 0x0) 18:28:17 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8000, r1}, 0x18) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x8, @vifc_lcl_ifindex, @remote}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100a36818002200c5cb151b864eda76b2c2ad04b84daadbac6519f4f9fa198a05b82bbdfe45a5a89b7e4c69289f62ff00000040d8308eb1f99e12734cbcd899390d8c76c1f0ef92ebabfb7a5fa36064e47b6026380f22872230c0df9b71e8173a07dae186", @ANYRES32=r5, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f0000000100)={0x281, 0x2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r10, 0xffffffffffffffff, r11, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, 0xffffffffffffffff, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x80, 0x7, 0x7ff, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x66, 0x0, 0xe3, 0x29, 0x0, @local, @loopback, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x5, [0x1]}, @noop, @timestamp_prespec={0x44, 0x54, 0x55, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@multicast2, 0x7fffffff}, {@empty, 0x2}, {@multicast2, 0xfffff53e}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@multicast2, 0x9}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1561}]}, @generic={0x0, 0xd, "64ced63945993e19485dca"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @map_val={0x18, 0x4, 0x2, 0x0, r8}, @ringbuf_query], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001800)=""/4096, 0x41100, 0x9, '\x00', r18, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x1, 0x4, 0xa, 0x7}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x2}, 0x90) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8047) 18:28:17 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x730101) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8089) 18:28:17 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x101200, 0x86) bind$isdn_base(r2, &(0x7f0000000100)={0x22, 0x0, 0x9, 0x1, 0x1}, 0x6) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000140)=@raw=[@generic={0xf0, 0xa, 0x4, 0x4, 0x1f}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x7, 0x1000, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000280)=[{0x1, 0x3, 0x7, 0x5}], 0x10, 0x9}, 0x90) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff807e) 18:28:17 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async, rerun: 32) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8000, r1}, 0x18) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x8, @vifc_lcl_ifindex, @remote}, 0x10) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100a36818002200c5cb151b864eda76b2c2ad04b84daadbac6519f4f9fa198a05b82bbdfe45a5a89b7e4c69289f62ff00000040d8308eb1f99e12734cbcd899390d8c76c1f0ef92ebabfb7a5fa36064e47b6026380f22872230c0df9b71e8173a07dae186", @ANYRES32=r5, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f0000000100)={0x281, 0x2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r10, 0xffffffffffffffff, r11, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, 0xffffffffffffffff, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x80, 0x7, 0x7ff, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x66, 0x0, 0xe3, 0x29, 0x0, @local, @loopback, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x5, [0x1]}, @noop, @timestamp_prespec={0x44, 0x54, 0x55, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@multicast2, 0x7fffffff}, {@empty, 0x2}, {@multicast2, 0xfffff53e}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@multicast2, 0x9}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1561}]}, @generic={0x0, 0xd, "64ced63945993e19485dca"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @map_val={0x18, 0x4, 0x2, 0x0, r8}, @ringbuf_query], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001800)=""/4096, 0x41100, 0x9, '\x00', r18, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x1, 0x4, 0xa, 0x7}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x2}, 0x90) 18:28:17 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="256d00000008000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000600000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, 0x0, 0x0) 18:28:17 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8000, r1}, 0x18) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x8, @vifc_lcl_ifindex, @remote}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x8, @vifc_lcl_ifindex, @remote}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100a36818002200c5cb151b864eda76b2c2ad04b84daadbac6519f4f9fa198a05b82bbdfe45a5a89b7e4c69289f62ff00000040d8308eb1f99e12734cbcd899390d8c76c1f0ef92ebabfb7a5fa36064e47b6026380f22872230c0df9b71e8173a07dae186", @ANYRES32=r5, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f0000000100)={0x281, 0x2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r10, 0xffffffffffffffff, r11, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10}, 0x18) (async) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, 0xffffffffffffffff, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x80, 0x7, 0x7ff, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x66, 0x0, 0xe3, 0x29, 0x0, @local, @loopback, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x5, [0x1]}, @noop, @timestamp_prespec={0x44, 0x54, 0x55, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@multicast2, 0x7fffffff}, {@empty, 0x2}, {@multicast2, 0xfffff53e}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@multicast2, 0x9}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1561}]}, @generic={0x0, 0xd, "64ced63945993e19485dca"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @map_val={0x18, 0x4, 0x2, 0x0, r8}, @ringbuf_query], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001800)=""/4096, 0x41100, 0x9, '\x00', r18, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x1, 0x4, 0xa, 0x7}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @map_val={0x18, 0x4, 0x2, 0x0, r8}, @ringbuf_query], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001800)=""/4096, 0x41100, 0x9, '\x00', r18, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x1, 0x4, 0xa, 0x7}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x2}, 0x90) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, 0x0, 0x0) 18:28:17 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, 0x0, 0x0) 18:28:17 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8048) 18:28:18 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0), 0x0) 18:28:18 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x730101) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x730101) (async) 18:28:18 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0), 0x0) 18:28:18 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808a) 18:28:18 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0), 0x0) 18:28:18 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8045) 18:28:18 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="256d00000008000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000600000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="256d00000008000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000600000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 18:28:18 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8049) 18:28:19 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8045) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) pipe2$watch_queue(&(0x7f0000000000), 0x80) r9 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0xa2) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:19 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808b) 18:28:19 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x730101) 18:28:19 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="256d00000008000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000600000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 18:28:19 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff804a) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) pipe2$watch_queue(&(0x7f0000000000), 0x80) r9 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0xa2) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:19 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket(0x8, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) openat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x92) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff}}, 0x14) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async, rerun: 32) r9 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0xa2) write$ppp(r9, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:19 executing program 4: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) 18:28:19 executing program 4: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async, rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) 18:28:19 executing program 4: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x440020, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000005b020000000000008b90000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r2, &(0x7f00000000c0), 0xffffff8a) 18:28:19 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8049) 18:28:19 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808c) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x440020, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x4) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000005b020000000000008b90000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) write$ppp(r2, &(0x7f00000000c0), 0xffffff8a) 18:28:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_kinect', 0x2a482, 0x4) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r1, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:19 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff804b) 18:28:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_kinect', 0x2a482, 0x4) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r1, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:19 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async, rerun: 32) r1 = socket(0x8, 0x3, 0x4) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) (rerun: 64) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async, rerun: 64) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) openat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x92) (async) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff}}, 0x14) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_kinect', 0x2a482, 0x4) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r1, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x440020, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x4) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000005b020000000000008b90000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) write$ppp(r2, &(0x7f00000000c0), 0xffffff8a) 18:28:19 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:19 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) r1 = socket(0x8, 0x3, 0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r3, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r5, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r3, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r6, r2, r7, r5, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r5, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) openat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x92) (async) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff}}, 0x14) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:19 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:28:20 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808b) 18:28:20 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808d) 18:28:20 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff804c) 18:28:20 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:20 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:20 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:28:20 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (rerun: 32) 18:28:20 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:21 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808e) 18:28:21 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff804d) 18:28:21 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8024) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8024) (async) 18:28:21 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:21 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@local, @multicast2}) 18:28:21 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff804e) 18:28:21 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:21 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff808f) 18:28:22 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (rerun: 32) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async, rerun: 64) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:22 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a7", 0x1) 18:28:22 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a7", 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a7", 0x1) (async) 18:28:22 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a7", 0x1) 18:28:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x5, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r12, 0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x100, '\x00', 0x0, r9, 0x2, 0x2}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r18 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x10) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r19, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r20, 0x1, 0x0, 0x0, {{}, {@val={0xf}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r18, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r20, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0xcb}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$ppp(r18, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:22 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xf6, &(0x7f0000001200)=""/246, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0), &(0x7f0000001700)=[{0x2, 0x4, 0x4, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x20, 0x4, 0xfea8, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x67, 0x0, 0x64, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x3a, [@remote]}, @timestamp_prespec={0x44, 0x34, 0x94, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x7fffffff}, {@loopback, 0x8}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xd4}, @call={0x85, 0x0, 0x0, 0xc9}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0xa, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0xf, 0xdf, &(0x7f0000000240)=""/223, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) [ 2938.587636][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:22 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (rerun: 32) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@local, @multicast2}) 18:28:22 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff804f) 18:28:22 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:22 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8090) 18:28:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x5, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r12, 0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x100, '\x00', 0x0, r9, 0x2, 0x2}, 0x48) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r18 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x10) (async) r19 = socket$nl_generic(0x10, 0x3, 0x10) (async) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r19, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r20, 0x1, 0x0, 0x0, {{}, {@val={0xf}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r18, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r20, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0xcb}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$ppp(r18, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r10, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r10, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x3, '\x00', 0x0, r9, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r15, r16, 0xffffffffffffffff, r17, r13, r9, r14, r12, r14], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x5, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r12, 0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x100, '\x00', 0x0, r9, 0x2, 0x2}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x10) (async) r18 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r19, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r20, 0x1, 0x0, 0x0, {{}, {@val={0xf}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r18, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r20, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0xcb}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r18, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r20, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0xcb}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$ppp(r18, &(0x7f00000000c0)="a5", 0xffff8024) (async) write$ppp(r18, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:23 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 32) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@local, @multicast2}) 18:28:23 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xf6, &(0x7f0000001200)=""/246, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0), &(0x7f0000001700)=[{0x2, 0x4, 0x4, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x20, 0x4, 0xfea8, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x67, 0x0, 0x64, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x3a, [@remote]}, @timestamp_prespec={0x44, 0x34, 0x94, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x7fffffff}, {@loopback, 0x8}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xd4}, @call={0x85, 0x0, 0x0, 0xc9}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0xa, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0xf, 0xdf, &(0x7f0000000240)=""/223, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) [ 2939.589498][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:23 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8050) 18:28:23 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8091) 18:28:23 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:23 executing program 4: ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x8, 0x9, 0x4, 0x3}, {0x6, 0x6, 0x20, 0x42d8b2e6}, {0x0, 0x6, 0x7, 0x6}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="001000800000000400000001461d00182e0d28202986067000000000e000000200000000f023899f19d491555d851f2896001fdff408934a5022b5ded8110d5822c21a861201291f4afcbddb61579463201ae3dc39273517f898105f9c355927d5333d963f9404a14aee9ba1802aafb973d5ec71fc2a0f725e3fe51383d805aa40023c0886770e8bcdf5814051179cc6183efa1f6aa15037ebcb2a40013c54721a111762e97c3e771e2363e4f801ba17c1b0cc9e5a6c4c"]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x9401, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:24 executing program 4: ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x8, 0x9, 0x4, 0x3}, {0x6, 0x6, 0x20, 0x42d8b2e6}, {0x0, 0x6, 0x7, 0x6}]}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="001000800000000400000001461d00182e0d28202986067000000000e000000200000000f023899f19d491555d851f2896001fdff408934a5022b5ded8110d5822c21a861201291f4afcbddb61579463201ae3dc39273517f898105f9c355927d5333d963f9404a14aee9ba1802aafb973d5ec71fc2a0f725e3fe51383d805aa40023c0886770e8bcdf5814051179cc6183efa1f6aa15037ebcb2a40013c54721a111762e97c3e771e2363e4f801ba17c1b0cc9e5a6c4c"]}) (async, rerun: 64) r0 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x9401, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:24 executing program 4: ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x8, 0x9, 0x4, 0x3}, {0x6, 0x6, 0x20, 0x42d8b2e6}, {0x0, 0x6, 0x7, 0x6}]}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="001000800000000400000001461d00182e0d28202986067000000000e000000200000000f023899f19d491555d851f2896001fdff408934a5022b5ded8110d5822c21a861201291f4afcbddb61579463201ae3dc39273517f898105f9c355927d5333d963f9404a14aee9ba1802aafb973d5ec71fc2a0f725e3fe51383d805aa40023c0886770e8bcdf5814051179cc6183efa1f6aa15037ebcb2a40013c54721a111762e97c3e771e2363e4f801ba17c1b0cc9e5a6c4c"]}) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x9401, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:24 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000080)="3c0fb4b60d2ef6a3d87c967a30ea60c018bc419ec50bd4684670c6128c4909d31384632f7eddfb208360846e5206663d7203aa94e6e19c65c73aab41d5738eee815a8c78420da0dc580336e37c574fe214d0950656e6094873a03cd7a4c5a89bd98e70b2917d426eea055e07fbb906b30579903c94c8e04ef3beb56b3080d4a8023587d15384473700871478d480", 0xffffff85) 18:28:24 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xf6, &(0x7f0000001200)=""/246, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0), &(0x7f0000001700)=[{0x2, 0x4, 0x4, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) (async) write$ppp(r9, &(0x7f00000000c0)="a5", 0xffff8007) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x20, 0x4, 0xfea8, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x67, 0x0, 0x64, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x3a, [@remote]}, @timestamp_prespec={0x44, 0x34, 0x94, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x7fffffff}, {@loopback, 0x8}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xd4}, @call={0x85, 0x0, 0x0, 0xc9}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0xa, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0xf, 0xdf, &(0x7f0000000240)=""/223, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) 18:28:24 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8051) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000640)={{r0}, r1, 0x1e, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x3, 0xfff, {0x2, 0x3, 0xb09, 0x3, 0x6}, [0xed9]}}, @devid}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x140800, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$ppp(r2, &(0x7f0000000100)="f3ebe341bf2d043942664a5d63822724a96d25cf07b517fceb3d2509e376913d79d37861bdb16d21f72ac903d74f1b83411caec1f09b0fe2be5e6405cbb12a064b9ef6892822bda2c3d0ba558a8ec4c28fb391", 0x53) 18:28:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:24 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8092) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000640)={{r0}, r1, 0x1e, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x3, 0xfff, {0x2, 0x3, 0xb09, 0x3, 0x6}, [0xed9]}}, @devid}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x140800, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$ppp(r2, &(0x7f0000000100)="f3ebe341bf2d043942664a5d63822724a96d25cf07b517fceb3d2509e376913d79d37861bdb16d21f72ac903d74f1b83411caec1f09b0fe2be5e6405cbb12a064b9ef6892822bda2c3d0ba558a8ec4c28fb391", 0x53) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000640)={{r0}, r1, 0x1e, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x3, 0xfff, {0x2, 0x3, 0xb09, 0x3, 0x6}, [0xed9]}}, @devid}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x140800, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) write$ppp(r2, &(0x7f0000000100)="f3ebe341bf2d043942664a5d63822724a96d25cf07b517fceb3d2509e376913d79d37861bdb16d21f72ac903d74f1b83411caec1f09b0fe2be5e6405cbb12a064b9ef6892822bda2c3d0ba558a8ec4c28fb391", 0x53) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4803, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4803, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4803, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x644100, 0x0) write$ppp(r9, &(0x7f00000000c0)="bc6bc6119f07776e5b333f34499262025cbe3924ab5f8ad4112d88bfebc41063745d0792dfdbef33fce42cd11d36f798ff27862b98a97b3aaf6dc8ee688bbb4be25078b7b6377ceebada33d24fb7634d56ea8aed0404bbef16b7379626f8a4342c566fac309422445ea9cebd4e1e65d24fe00cf38b3531ffffffffffffffff78eaccf37cae4f1d2c0f830e9cf6ee712b94829662c1753582630e1e5c64d6", 0x9e) 18:28:24 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x644100, 0x0) write$ppp(r9, &(0x7f00000000c0)="bc6bc6119f07776e5b333f34499262025cbe3924ab5f8ad4112d88bfebc41063745d0792dfdbef33fce42cd11d36f798ff27862b98a97b3aaf6dc8ee688bbb4be25078b7b6377ceebada33d24fb7634d56ea8aed0404bbef16b7379626f8a4342c566fac309422445ea9cebd4e1e65d24fe00cf38b3531ffffffffffffffff78eaccf37cae4f1d2c0f830e9cf6ee712b94829662c1753582630e1e5c64d6", 0x9e) 18:28:25 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8052) 18:28:25 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000080)="3c0fb4b60d2ef6a3d87c967a30ea60c018bc419ec50bd4684670c6128c4909d31384632f7eddfb208360846e5206663d7203aa94e6e19c65c73aab41d5738eee815a8c78420da0dc580336e37c574fe214d0950656e6094873a03cd7a4c5a89bd98e70b2917d426eea055e07fbb906b30579903c94c8e04ef3beb56b3080d4a8023587d15384473700871478d480", 0xffffff85) 18:28:25 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x644100, 0x0) write$ppp(r9, &(0x7f00000000c0)="bc6bc6119f07776e5b333f34499262025cbe3924ab5f8ad4112d88bfebc41063745d0792dfdbef33fce42cd11d36f798ff27862b98a97b3aaf6dc8ee688bbb4be25078b7b6377ceebada33d24fb7634d56ea8aed0404bbef16b7379626f8a4342c566fac309422445ea9cebd4e1e65d24fe00cf38b3531ffffffffffffffff78eaccf37cae4f1d2c0f830e9cf6ee712b94829662c1753582630e1e5c64d6", 0x9e) 18:28:25 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8093) 18:28:25 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:25 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000001005e0018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) unlinkat(r7, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r0, &(0x7f00000000c0)="a5", 0x1) 18:28:25 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:28:25 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000001005e0018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) unlinkat(r7, &(0x7f0000000040)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0x1) 18:28:25 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000001005e0018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) unlinkat(r7, &(0x7f0000000040)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) write$ppp(r0, &(0x7f00000000c0)="a5", 0x1) 18:28:25 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:25 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8094) 18:28:25 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8053) 18:28:25 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (rerun: 64) write$ppp(r0, &(0x7f0000000080)="3c0fb4b60d2ef6a3d87c967a30ea60c018bc419ec50bd4684670c6128c4909d31384632f7eddfb208360846e5206663d7203aa94e6e19c65c73aab41d5738eee815a8c78420da0dc580336e37c574fe214d0950656e6094873a03cd7a4c5a89bd98e70b2917d426eea055e07fbb906b30579903c94c8e04ef3beb56b3080d4a8023587d15384473700871478d480", 0xffffff85) 18:28:25 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = openat(r0, &(0x7f0000000600)='./file0\x00', 0x50c581, 0x2c) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1) 18:28:25 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = openat(r0, &(0x7f0000000600)='./file0\x00', 0x50c581, 0x2c) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) (async) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1) 18:28:25 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = openat(r0, &(0x7f0000000600)='./file0\x00', 0x50c581, 0x2c) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) openat(r0, &(0x7f0000000600)='./file0\x00', 0x50c581, 0x2c) (async) write$ppp(r1, &(0x7f0000000140)="8c", 0xffffffe4) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1) (async) 18:28:26 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:26 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:28:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x14, r1, 0x5}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dc68dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c95d75b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fbc2205}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x299a8037}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b030bf}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f5eba86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fbdf3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x433c6edd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x202740a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672cdc9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa980}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x457e66dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75580000}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000815}, 0x4050) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r13, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r14, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r15, 0xffffffffffffffff}, 0x4) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r13, 0xfffffffd, 0x8}, 0xfffffffffffffe8b) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r17, 0x3, '\x00', 0x0, r12, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r14}, './file0\x00'}) r20 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r17}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r18, r19, 0xffffffffffffffff, r20, r16, r12, r17, r15, r17], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x200}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r15, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r3, &(0x7f0000000000)='./file0\x00', r12, &(0x7f0000000080)='./file0\x00', 0x1000) 18:28:26 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:26 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 18:28:26 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) 18:28:26 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8095) 18:28:26 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8054) 18:28:26 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:26 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x14, r1, 0x5}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x14, r1, 0x5}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dc68dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c95d75b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fbc2205}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x299a8037}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b030bf}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f5eba86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fbdf3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x433c6edd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x202740a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672cdc9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa980}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x457e66dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75580000}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000815}, 0x4050) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) (async) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r13, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r14, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r15}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r15, 0xffffffffffffffff}, 0x4) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r13, 0xfffffffd, 0x8}, 0xfffffffffffffe8b) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r17, 0x3, '\x00', 0x0, r12, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r14}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r17}, 0x18) (async) r20 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r17}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r18, r19, 0xffffffffffffffff, r20, r16, r12, r17, r15, r17], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x200}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r15, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r3, &(0x7f0000000000)='./file0\x00', r12, &(0x7f0000000080)='./file0\x00', 0x1000) 18:28:27 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7, 0x60f5}) socket$inet_udplite(0x2, 0x2, 0x88) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:27 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:27 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8096) 18:28:27 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8055) 18:28:27 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x14, r1, 0x5}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dc68dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c95d75b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fbc2205}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x299a8037}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b030bf}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f5eba86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fbdf3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x433c6edd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x202740a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672cdc9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa980}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x457e66dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75580000}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000815}, 0x4050) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dc68dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c95d75b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fbc2205}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x299a8037}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b030bf}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f5eba86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fbdf3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x433c6edd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x202740a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672cdc9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa980}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x457e66dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75580000}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000815}, 0x4050) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r4, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r4, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r9, r10, 0xffffffffffffffff, r11, r7, r3, r8, r6, r8], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r6, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r13, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r14}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r14, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r15, 0xffffffffffffffff}, 0x4) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r13, 0xfffffffd, 0x8}, 0xfffffffffffffe8b) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r17, 0x3, '\x00', 0x0, r12, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r14}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r17}, 0x18) (async) r20 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r17}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r18, r19, 0xffffffffffffffff, r20, r16, r12, r17, r15, r17], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x200}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r15, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r3, &(0x7f0000000000)='./file0\x00', r12, &(0x7f0000000080)='./file0\x00', 0x1000) 18:28:27 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7, 0x60f5}) socket$inet_udplite(0x2, 0x2, 0x88) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7, 0x60f5}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) 18:28:27 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8097) 18:28:28 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8056) 18:28:28 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000080)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x1, "d16cb6ad1eb7facd39477a13114e5b933bd17b5383d9e7c37bbaaa7798829a99", 0x9, 0x8000, 0x52, 0x800000}, 0x3c) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:28 executing program 5: mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 5: mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 5: mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 5: mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:28 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8098) 18:28:28 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7, 0x60f5}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:28 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8057) 18:28:29 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:29 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000080)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x1, "d16cb6ad1eb7facd39477a13114e5b933bd17b5383d9e7c37bbaaa7798829a99", 0x9, 0x8000, 0x52, 0x800000}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x1, "d16cb6ad1eb7facd39477a13114e5b933bd17b5383d9e7c37bbaaa7798829a99", 0x9, 0x8000, 0x52, 0x800000}, 0x3c) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:29 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:29 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8099) 18:28:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="0800b70032000000080026003c140000080026006c09000008002600b40900008c07b9800c00ba001965f7ff000408000600bb00000000001000ba00ffff010007008000ff01060004030e00802000000802110000010802110000007a04199f786dbf0a0100000000000080090001000301070602ff7f05d9403801f7a7cecfba5bea0bb0d5e75b697488f63fd227467b5583e6f35b048f6787ca363fecae38136bba729b01a6e4e0513981fbe1e2b1da7a7ad6088d6afb1ae43a1b43742fb3c96c6affafe1be9b6d10b259907d1db7432264475aacb0bce6f6bc0cf6485162e6d2a0424b179496370dfb52c8e1eea924b099baa0293f414b8000ce30af34a698bf567c3e107bc8bf54bc7bce80d33408a109865ba77bff4ed498c46898aab5f2b3f1bca3223813831e7775db5d491c00038ae6ab44dcd1706e3592a7ef3a9b03868c35a8a72f8649639533fb928dfade6d2a0100dd75d3650155586a230e9706847b4ee9f9b79158006f7ceb55d65c7175fe852a2de809c60fa14d95ba6f843ce8a9244ffcd1bd44ca0ecca7c0ed30e51c7e1471bc436e3e6f5f64e03e461bb118309b05ecb2dbe9a00ac5efbcc6acf1163625605f55e6e04cac81b33c8c72424a1d0d194b09ecf1160201dd47f73a7a09a769d6bd0b5f35e4c67094c299e76542421915730f677388d883732977092d7286055ea952c7116c7ede7f3f7f8e49353032369a91cf0f8d46967d96ee76f5961f3121dddb1f82e954fdc29f397347519ae00b5d7042bae99fa50c3c3b2dd3180181e4eb3c8535a77a5e351faecc89bd137b662b988fb239129d3ff66f123a5a6a616d14dbd8b5b01d3d194a518f56985bb4b41673de6f2e9d3bd937f9b30db0ade8df553599fa4ceede93a651fa0c0dc67e5e5ff33090e7841179f8cb9debb2357a7df274e3edd47f94bdcd37bc506bf18b218714d1e7ef932c76b38392dd6729fc9380aaa4fcf5d19f91ad085b8abf1c9f327c2c5ba12f68a7989002a9d2e7435838b7250481bd73c4be27dc1bcb422865b89fbc39af5e9c78212d9501497cdd58a2c231dff2d73254e813763d25df95dbc60a0b33d1c5382cef3c753ff23d297fecf4b6e12d88e2942b85ad029271f902d63febd01ba3f42702e185f44720cb903f0308011065deb58705fb818f94d001b72044263f2dd50570000e801800020011e08b43a4f6b5bf780af331b1cf45bfb630dbdb20000300c2fd8c2b02a4eeb27665fc6445e308be4217a2e3a97a6d501407cf6b3400020025fb64fd333cb59d7fd4e0e73aaf2dda3ff45a64d62bd94bd38323095f849f318b1bef5f878869295113a2c47c37ffe00c002a00000602020202020204000f00bd010e00802c02000802110000010802110000013dff6bd4f60f050002000000000000000000804800060202020202020100030164040605c5f700010006020600250301701f2a01033c0401020a0972060303030303037107ff000000010560dd6d9c6e5befdb378c40cf06d265f897c68cecd9bd3045af8eae4037c3857a660fc6de4e4efc2f14a6334b649c281cb52e4863d0f772645e039b6207895f6f0851bd3b2d2c6094c621c920f3e8c8f60b31bc13951765222ec74bfd8fe2183fc3c86e3f4be7a28908b83db7b1a817b4ddeca6e2ae170c42c5b175fd3c7584b42bcfa932b7ea70d17dd121cdc29cbb824eb9d1932410b0a1246be7359d28927eb7b7d8776835f29d611cc9042dd5fc5d883dea5c91083a476afed808019a029b5abdb6b729e46f33835cd58d1b73a6cf6825645b49415dab3363fd76641d327dc4e257f88719b722efe8267fb5fb19c4e95733502039da507cc0b57370210793e465dc8ce0497e9b568a61179f1b8a21213093938a1eec68628ee4beb948caf4fc0c70f5980047e8933829ae87d88c4ad1f1544af38c2d540f0b317fa151c69c890e2f9e80244ca3535eff383263ab428b75c79bb2cb9120e21128a77b5100000025000f00001f8fa9d8ea10fc38270e706b426eee823ff5bde5af3e76c0ecd0cebb7b5b5ae50000002c010f0068040700070065120802110000000802110000000802110000012623208120612d55961f75b1d18f2296988517e462e36cd9e95997eb8b9385b014490bf85205bb57e9016b09c73df529f0fdb701533816adff9b3f102e0bf04842be1e8357acc64b7667aea899cd9893ddf3e1b5710912f9815be16e0d66e9ee53dfbb5f7b994ffcee3185d599eff8ef25a8ce956d8e8e2a2a5b5f0c5acee1a10d940e7871f29183218771f5719bc742904075b99de585eb69ac9045b4cd3fe714ee145428e3238a8d031e60b117fa0c74e9b8d50bad3ec012c6d498d0e09c6f8b6248ededbeb93e9d022972402282d85b2bee34349fb2edbfb8e9ca88e25052ee772d1a01000dff0f000000000000200081000a0000000003000000001f01068409c8a492ab72060303030303030800ba000600010035000f002627098102da9629c6cf6a05021ba6cc6d5a72360f45e7bb6e4177f665ad446fd143d768e6c545004604060407ff03070000000083008000040603ff020005007e151202ffffffffffffff05000000ffffffffab0b0000dd5e8886b75cb99c262d8d17f156d2542c0aed2dc0063ddf09a07c0f628b7b5aa053d55d020e9fe1a4eef43bc2317319617a4b76453e1d9b0a06f941521c30bf94f45f4b1d27280c2045c74b2a5a184282c1caaec686a2ffb437f285eb304450000800bb0000084000a407b9807f0791005c79532222c69bd955d513720d89320b1a9eff4379e9dc2cd995e4a922472a4b7310818fbac03a2d958ade37b85c73fdcbfe9c3d5ef6eba6fe5354d42b709b6807b4daa32074090b4ea52bd3bad2cddee884cf6b02531413b152e2eabe8883cba9c01409a829a211852bf25495f8bf5d8c6d6599a5ccca8af214eec783a742237e79ffc0625fe6f4cd2a17f5eeac6f6eb1ef683560e2e34bedd0c5df7bd7aa3f9ddc0e5a3f1c389fa84ec2902a1b3cc7f24c7ce2b631ec7ba7146b53fd38dba6be222500bf2e7327ed08aa84bb400ca5fd98dd35fb17e97f9a1edcdd38ef58ab5c3e3012883e73047e2e4c87635276e6f10e10c24f8883f61cf27a6bba0e5ec69b942a02e6f5b1c8487f8c894eb3b2417d36ac8ce76766e135c4895141934603b89b40ce770f622bcb45be18a08bfc0989b7ac03ec4fe2820e5961c0c712f7d8e69f0eef53809a5857ebb86a7d0ebde6b03a8e5e80dc468771f9683e9e1844d2109369db534c7738ee487ba8b9288d86e64f8d81631b5fb1566de660960cee240ad0dd36dd7c35b050381435078ba29b3041f866355f341a2e0f62c93b5a9f81a255af2c08ffda984852a3e4b7b53ab686689d230f3c4d3baeda582d4c6947f71491e4d5c2884ef5bc30d7ffcf4c1e84c5e215f9846b0db08028b7b9f1ff7fbbecaf2164ed58d185a5c7acf4cf8fc2acd7672b5ed38f7c520e1eab5beaeecdd18745e46ec45e28659b0ae6b62eeb82782716e0a04724124dd24e79cddb6be371d57296f7aa0f8f73017b8bd47c9cab89867965ee95feb162df03374304d0cf4d9a2732e0c56fcb849aa28ffc1061d89b050d67473266593f1940eecc7fc1301a60035cb1251bb59c5c846b75c7d0235e7010d7e2c4307850ced3f19ef0e374019767df47419e49f43c34a49fbd090aba23a60e3c2dc9233303a40d40a5a2f4aa4f0ae419db3e6a82c05ae31d9c0939880672c0b2801c138bea2b3c616c3a80e3779a72454db14ed366a02fed260cc6d464792b8aa28c134009abf85aa7126f9dfdc4a278586a60dadb981da666616d31ab54e58146d0a4be556aa728cb79ce6089e6c26a7a0b2f25a0d0afd57626b5c01d03279a9fb0dad079065ee4ee0991419a4c179fcebb4bff557dd3340ee710e009b3a7920f938e2992de58c4c4d44808c7b68cee2d080230902b8b9b967ab7c15babea82694865e776140e4a0b6f27742f300f4d3ce32ea2bfa6ca3c7f3203ad510d9044188cfceb60e6d6ad090ed4dbf9b0df4ff2265b44968deb9229ecedfdb8436bcc972420574e9ef56cb1b4e2f059329661bcc7217a1ebc0e8a4e6389a4e4de6965f522c5dc7c28988235e0db4a1b6f4e14fff75501d466d3f58afac06733041cd561ad63a5414d00c5fa1531d1a541af0907d73d63791ee000e649ae9fdef52bd8d78d858eea3d62590105e310875a81ed812068ec11f94e5edd053054c8260ad1a7c847ddfff8fefc3ebd1eca5201d9ea22eda6970150062d300c8d5724b0469b0adb6ccc270d37c5348da3fc902a1794ebe01933f03fd228538681206ff2145f7da95b114f3c86758a644b3e073f19afe091ad00f25dca3c358ee74f8a0fd057724e3101f13873a6a763a3d920e7053a53a8fffe67ecbb5249b4985b555e9f754da3883a47cdd0ef63f83a8725eb23303b62a9bafade9a06cd8a50e8fec17ac8c716073bbb0c888e4c7e7deaa8418f8f80abbe2260e79d6053583f4c5bf3521244784824d5c604c4d9fffc58ce134c5e73aaa29fd9e6ecbecf04d05578b37ddcd22a0a4007865e86a2daf3feaac30e0616421045e8ce5afe623a8de983480d010a94ac52184d5abb985ee9a8ef3a6c5782f59cae7d2fe62408059182437e8c7b76352eaf42f9abad40a0aa8a1bc7289e066ab6476445b39d26a2bf4e5175ac5d658f9f6f9d98679ea222e60b06315d8f6baccffbe2fe11fc9c402468422ed9b860bb6227075041b846c7cf829ba1af9e13be4e867fc46d818eb844ad8cc77915cee2d292ddc0b07f2791bd5f12e24ccc7d50d41965d36967691aba9532106d8d78a14a1fcf0928a575f5fe7f180e0eb7acf6b9c6e2854908c04f2ccef83985a81b7d971e083794a66f283438fd3a424439a0bcdeb2c0582db1c6fcb49b39e0e4839401f03ecf539e73b1f52a870e143aa3f4a429fd1511ace92c7fd8dc14280329dc1e8c6d81508fdf3e84a959d15d0cf9609580b9ec43e5b659c51dac0c10cd04e69bddfc7ef5e03a39d736c4f2879353b498a7cd23fa91f7ee408880469fff2b8bf9a085c69eb4a309b347a9d2632d7dcd7cb068ecf645a4d277af3110030557b28acef4e0fa50baba0a76691c18fba5065263770e7e72c5d41ef332e13db97a808a7594b689a20f31b5d4d7a35c64f6e715c3d1b0e80406a9b12c522741ca76d9612356eb48f3cbb459c1d44bbf4e1e26a23c7d99455d345d44888fe8658106ddf8aaff552cf16b64294cb5fd73d9511b7cfe0bc489de5b07838a979caf8fe8c1da04ac83b0bb26eb4e22a0bf6a1b462c4ffcced9d52029c399f3eb01d7dc51ab2f5f3685a45d2b661627196ca3a9afe7ff7f740be2a4e81f8adf9cabe4a28441856a46bdb01de4b2b19430f96a8478a68674c4e93cc4e50a8e50ea42cf59bd5ef49f2d2caa9c6cebecea4c8f4db6423bd1e26fdfc501ef30f3378fb6d46ec1292094fec2a7000400bb000800bb00030000040400bb000600ba00fcff00000800bb00003001040800b700aa000000080026006c09000008009f0000000000"], 0xf84}, 0x1, 0x0, 0x0, 0x4880}, 0x4000044) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) 18:28:29 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8058) 18:28:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xf84}, 0x1, 0x0, 0x0, 0x4880}, 0x4000044) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) 18:28:29 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xf84}, 0x1, 0x0, 0x0, 0x4880}, 0x4000044) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) 18:28:29 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7}) 18:28:29 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="01802b5230766fb7084b9c86", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r1, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:30 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8059) 18:28:30 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000080)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x1, "d16cb6ad1eb7facd39477a13114e5b933bd17b5383d9e7c37bbaaa7798829a99", 0x9, 0x8000, 0x52, 0x800000}, 0x3c) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000080)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x1, "d16cb6ad1eb7facd39477a13114e5b933bd17b5383d9e7c37bbaaa7798829a99", 0x9, 0x8000, 0x52, 0x800000}, 0x3c) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) 18:28:30 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:30 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff809a) 18:28:30 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="01802b5230766fb7084b9c86", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r1, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:30 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7}) 18:28:30 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7}) 18:28:30 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:30 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff805a) 18:28:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x200, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x27, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, r9, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x9, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000000)='./file0/file0\x00', 0x8000, 0x103) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r12, r7, 0x4, 0x2}, 0x48) write$ppp(r10, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x200, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x27, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, r9, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x9, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) mknodat$null(r0, &(0x7f0000000000)='./file0/file0\x00', 0x8000, 0x103) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r12, r7, 0x4, 0x2}, 0x48) write$ppp(r10, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x200, 0x10}, 0xc) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) (rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x27, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, r9, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x9, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) mknodat$null(r0, &(0x7f0000000000)='./file0/file0\x00', 0x8000, 0x103) (rerun: 32) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r12, r7, 0x4, 0x2}, 0x48) (async, rerun: 64) write$ppp(r10, &(0x7f0000000140)="8c", 0xffffffe4) (rerun: 64) 18:28:31 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) 18:28:31 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff809b) 18:28:31 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:31 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:31 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="01802b5230766fb7084b9c86", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r1, &(0x7f00000000c0)="a5", 0xffff8024) 18:28:31 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff805b) 18:28:31 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 64) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (rerun: 32) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) 18:28:31 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff809c) [ 2948.434145][T12337] ================================================================== [ 2948.442241][T12337] BUG: KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_dispatch_rq_list [ 2948.451026][T12337] [ 2948.453345][T12337] write to 0xffff8881003ff4f8 of 4 bytes by task 249 on cpu 1: [ 2948.460883][T12337] blk_mq_dispatch_rq_list+0xf4d/0x1090 [ 2948.466417][T12337] __blk_mq_sched_dispatch_requests+0x5ec/0xd20 [ 2948.472691][T12337] blk_mq_sched_dispatch_requests+0x99/0x100 [ 2948.478658][T12337] blk_mq_run_work_fn+0x65/0xe0 [ 2948.483499][T12337] process_scheduled_works+0x5b8/0xa30 [ 2948.488974][T12337] worker_thread+0x525/0x730 [ 2948.493774][T12337] kthread+0x1d7/0x210 [ 2948.497856][T12337] ret_from_fork+0x48/0x60 [ 2948.502291][T12337] ret_from_fork_asm+0x11/0x20 [ 2948.507058][T12337] [ 2948.509465][T12337] read to 0xffff8881003ff4f8 of 4 bytes by task 12337 on cpu 0: [ 2948.517097][T12337] blk_mq_dispatch_rq_list+0xcab/0x1090 [ 2948.522646][T12337] __blk_mq_sched_dispatch_requests+0x5ec/0xd20 [ 2948.528895][T12337] blk_mq_sched_dispatch_requests+0x99/0x100 [ 2948.534880][T12337] blk_mq_run_hw_queue+0x2a4/0x4c0 [ 2948.539988][T12337] blk_mq_get_tag+0x479/0x590 [ 2948.544656][T12337] __blk_mq_alloc_requests+0x642/0x9e0 [ 2948.550124][T12337] blk_mq_submit_bio+0x468/0xd90 [ 2948.555044][T12337] __submit_bio+0x11c/0x350 [ 2948.559536][T12337] submit_bio_noacct_nocheck+0x449/0x5e0 [ 2948.565169][T12337] submit_bio_noacct+0x70c/0x8c0 [ 2948.570095][T12337] submit_bio+0xb7/0xc0 [ 2948.574232][T12337] iomap_dio_bio_iter+0xa50/0xbe0 [ 2948.579243][T12337] __iomap_dio_rw+0x8db/0x1090 [ 2948.584008][T12337] iomap_dio_rw+0x40/0x90 [ 2948.588344][T12337] ext4_file_write_iter+0xa8a/0xe10 [ 2948.593559][T12337] vfs_write+0x48a/0x790 [ 2948.597805][T12337] ksys_write+0xeb/0x1a0 [ 2948.602042][T12337] __x64_sys_write+0x42/0x50 [ 2948.606623][T12337] do_syscall_64+0x44/0x110 [ 2948.611131][T12337] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2948.617014][T12337] [ 2948.619329][T12337] value changed: 0x00000007 -> 0x00000008 [ 2948.625040][T12337] [ 2948.627358][T12337] Reported by Kernel Concurrency Sanitizer on: 18:28:32 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) [ 2948.633499][T12337] CPU: 0 PID: 12337 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 2948.643914][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2948.653971][T12337] ================================================================== 18:28:32 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:32 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff805c) 18:28:32 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) 18:28:32 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3, 0x0, 0x4, 0x2}, 0x6) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x103) 18:28:32 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6d81, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xf800, 0x3b, 0xded, 0x7, 0x9, 0xb0, 0xcce, 0x8, 0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd0}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) [ 2949.174851][T12337] syz-executor.1 (12337) used greatest stack depth: 10088 bytes left 18:28:32 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff809d) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff805d) 18:28:33 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3, 0x0, 0x4, 0x2}, 0x6) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x103) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3, 0x0, 0x4, 0x2}, 0x6) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (async) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x103) (async) 18:28:33 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x24981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) 18:28:33 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff809e) 18:28:33 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6d81, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6d81, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xf800, 0x3b, 0xded, 0x7, 0x9, 0xb0, 0xcce, 0x8, 0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd0}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, 0x0, 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:33 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff805e) 18:28:34 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (rerun: 32) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (rerun: 32) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3, 0x0, 0x4, 0x2}, 0x6) (async, rerun: 32) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) (rerun: 32) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x103) 18:28:34 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x24981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) 18:28:34 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff809f) 18:28:34 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6d81, 0x0) (rerun: 64) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async, rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) (rerun: 32) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xf800, 0x3b, 0xded, 0x7, 0x9, 0xb0, 0xcce, 0x8, 0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd0}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) 18:28:34 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:34 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff805f) 18:28:35 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$revoke(0x3, r1) keyctl$search(0xa, 0x0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, r0) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:35 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x24981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x24981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) 18:28:35 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a0) 18:28:35 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dsp_pipeline', 0x420300, 0xb) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "6c4a0921a1e1a215a8a521a0dbefa627"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x38}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "eadd53b8b80821f28e9f52a9b65ff689"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44810}, 0x80) write$ppp(r0, &(0x7f0000000080)="aae304d9cb8a7f9ba5", 0x9) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2100, 0x0) r5 = inotify_init1(0xe627000f07aabe9a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x102, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) 18:28:35 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) (async) keyctl$revoke(0x3, r1) (async) keyctl$search(0xa, 0x0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, r0) (async) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:35 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:35 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$revoke(0x3, r1) (async) keyctl$revoke(0x3, r1) keyctl$search(0xa, 0x0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, r0) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:35 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dsp_pipeline', 0x420300, 0xb) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "6c4a0921a1e1a215a8a521a0dbefa627"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x38}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "eadd53b8b80821f28e9f52a9b65ff689"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44810}, 0x80) write$ppp(r0, &(0x7f0000000080)="aae304d9cb8a7f9ba5", 0x9) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) (async) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2100, 0x0) inotify_init1(0xe627000f07aabe9a) (async) r5 = inotify_init1(0xe627000f07aabe9a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x102, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x102, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) 18:28:35 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:35 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dsp_pipeline', 0x420300, 0xb) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "6c4a0921a1e1a215a8a521a0dbefa627"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x38}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "eadd53b8b80821f28e9f52a9b65ff689"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44810}, 0x80) write$ppp(r0, &(0x7f0000000080)="aae304d9cb8a7f9ba5", 0x9) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2100, 0x0) r5 = inotify_init1(0xe627000f07aabe9a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x102, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dsp_pipeline', 0x420300, 0xb) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "6c4a0921a1e1a215a8a521a0dbefa627"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x38}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "eadd53b8b80821f28e9f52a9b65ff689"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44810}, 0x80) (async) write$ppp(r0, &(0x7f0000000080)="aae304d9cb8a7f9ba5", 0x9) (async) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2100, 0x0) (async) inotify_init1(0xe627000f07aabe9a) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x102, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) (async) 18:28:35 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x8, 0x800, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000100)={0x3, 0xff, 0x1, 0x9, 0x2, [0x461b, 0xda, 0x1, 0x4]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0/file0\x00', 0x0, 0x4000, r1}, 0x18) r3 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x200180, 0x40) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000080)={@mcast1, @remote}) 18:28:35 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8060) 18:28:36 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a1) 18:28:36 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) 18:28:36 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:36 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket(0x8, 0x800, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000100)={0x3, 0xff, 0x1, 0x9, 0x2, [0x461b, 0xda, 0x1, 0x4]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0/file0\x00', 0x0, 0x4000, r1}, 0x18) r3 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x200180, 0x40) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async, rerun: 32) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000080)={@mcast1, @remote}) (rerun: 32) 18:28:36 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:36 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8061) 18:28:36 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a2) 18:28:36 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) (async) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) 18:28:37 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:37 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket(0x8, 0x800, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000100)={0x3, 0xff, 0x1, 0x9, 0x2, [0x461b, 0xda, 0x1, 0x4]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0/file0\x00', 0x0, 0x4000, r1}, 0x18) (async) r3 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x200180, 0x40) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000080)={@mcast1, @remote}) 18:28:37 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8062) 18:28:37 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) 18:28:37 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a3) 18:28:37 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) (async) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:37 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$update(0x2, r0, &(0x7f0000000080)="7f7a67deaf0c9847ba89687f2f73bf4b387aa4011823ff5eb934101e75099922b39553571f9eac80abb1d6737bd73cf3d8292c6435b6edc656be50806d18de90cdbf9ebdad790e03988186bf00d0631e0d818b228697442c9521780df3819a0031505d71e96fd592b1936b511ff9bcd2dab0", 0x72) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r1 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:37 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:37 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x1, 0x8f95, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) 18:28:37 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8063) 18:28:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:38 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:38 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a4) 18:28:38 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:38 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$update(0x2, r0, &(0x7f0000000080)="7f7a67deaf0c9847ba89687f2f73bf4b387aa4011823ff5eb934101e75099922b39553571f9eac80abb1d6737bd73cf3d8292c6435b6edc656be50806d18de90cdbf9ebdad790e03988186bf00d0631e0d818b228697442c9521780df3819a0031505d71e96fd592b1936b511ff9bcd2dab0", 0x72) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:38 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x1, 0x8f95, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) 18:28:38 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x1, 0x8f95, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) 18:28:38 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x8) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000828ec4444585579b08600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000040000340000001c001180040004000400070004000700040005000400040004000500050029000a00000006001000f001000006001a01020000001000bd00050002004e08000803001f00050029000a00000008001180040001000600b50003010000"], 0x84}, 0x1, 0x0, 0x0, 0x4011}, 0x8005) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x231}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7ff}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040041) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x1000) 18:28:39 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8064) 18:28:39 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:39 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a5) 18:28:39 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:39 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e8975768299ed810123f5566ae735dac510da6a842a348dcee8acdc45142f409a20e501ba1e44e059735dba8bb9e6eb07b23836f502f5a1ce990d7b81032429"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$update(0x2, r0, &(0x7f0000000080)="7f7a67deaf0c9847ba89687f2f73bf4b387aa4011823ff5eb934101e75099922b39553571f9eac80abb1d6737bd73cf3d8292c6435b6edc656be50806d18de90cdbf9ebdad790e03988186bf00d0631e0d818b228697442c9521780df3819a0031505d71e96fd592b1936b511ff9bcd2dab0", 0x72) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) socket(0x2a, 0x2, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) (async) write$ppp(r2, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:39 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x8) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000828ec4444585579b08600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000040000340000001c001180040004000400070004000700040005000400040004000500050029000a00000006001000f001000006001a01020000001000bd00050002004e08000803001f00050029000a00000008001180040001000600b50003010000"], 0x84}, 0x1, 0x0, 0x0, 0x4011}, 0x8005) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x231}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7ff}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040041) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x1000) 18:28:39 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x8) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000828ec4444585579b08600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000040000340000001c001180040004000400070004000700040005000400040004000500050029000a00000006001000f001000006001a01020000001000bd00050002004e08000803001f00050029000a00000008001180040001000600b50003010000"], 0x84}, 0x1, 0x0, 0x0, 0x4011}, 0x8005) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x231}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7ff}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040041) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x1000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) (async) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x8) (async) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000828ec4444585579b08600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000040000340000001c001180040004000400070004000700040005000400040004000500050029000a00000006001000f001000006001a01020000001000bd00050002004e08000803001f00050029000a00000008001180040001000600b50003010000"], 0x84}, 0x1, 0x0, 0x0, 0x4011}, 0x8005) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x231}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7ff}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040041) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r8, r9, 0xffffffffffffffff, r10, r5, r1, r7, r4, r7], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x1000) (async) 18:28:40 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:40 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8065) 18:28:40 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a6) 18:28:40 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:40 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="01000000010000f418000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0xfffffffd, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x5, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r11, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="00000000000000afdadc7404b8f95700ec102368f8f35fb73e0000008068473d000000003189ccfab7b8eae815d4023b1c6de4a39c193c9e5eedf394d2d94649b805b71e5c21595d7c5bb93e0f931a5d5df699896b9e45d99e82564ec5f5e9c4df194e55f0106cfb410ccc15da6d98256d53ef73cdd0a2d0aad810a660eaaa1dc190cd434f080d119e42bda6f43e66109e91e25221862f485628917e656bf5845abc44cd583b1106a8fcb6029c2fb1849c9b46efff39ba7482ba6ad49432c425c6ec452ecf41577c80bdd3679ac993687287a9137df25b1b1f69800c994b0ea5ff3fcbf7276c053fa30139bb51"]) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r13}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r14, r15, 0xffffffffffffffff, r16, r12, 0xffffffffffffffff, r13, r11, r13], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xa}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r18 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/dev/char', 0x80400, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r17, r18, 0x3, 0x1, 0x1}, 0x48) linkat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 18:28:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 18:28:40 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/bdi', 0x101040, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25d, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r9, 0xffffffffffffffff, r8, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x4, 0x6}], 0x10, 0x9}, 0x90) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresgid(0xee01, r10, 0x0) getgroups(0x2, &(0x7f0000000080)=[0xee00, r10]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) 18:28:40 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8066) 18:28:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 18:28:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 18:28:40 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc00) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x187840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, [@alu={0x4, 0x1, 0x1, 0x7, 0x1, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x6, 0xa, 0x80, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r9}, @alu={0x7, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffff0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0xf51, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r0, r2, r2, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0xd, 0xb}], 0x10, 0x2}, 0x90) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r10}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4}, 0x8) r11 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x80) write$ppp(r11, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:40 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) linkat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc00) (async) linkat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc00) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x187840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, [@alu={0x4, 0x1, 0x1, 0x7, 0x1, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x6, 0xa, 0x80, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r9}, @alu={0x7, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffff0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0xf51, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r0, r2, r2, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0xd, 0xb}], 0x10, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, [@alu={0x4, 0x1, 0x1, 0x7, 0x1, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x6, 0xa, 0x80, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r9}, @alu={0x7, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffff0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0xf51, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r0, r2, r2, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0xd, 0xb}], 0x10, 0x2}, 0x90) socket$igmp6(0xa, 0x3, 0x2) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r10}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r10}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4}, 0x8) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x80) (async) r11 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x80) write$ppp(r11, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:40 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r1, 0x4, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r6, r7, 0xffffffffffffffff, r8, r4, r0, r5, r3, r5], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 32) linkat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc00) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x187840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, [@alu={0x4, 0x1, 0x1, 0x7, 0x1, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x6, 0xa, 0x80, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r9}, @alu={0x7, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffff0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0xf51, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r0, r2, r2, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0xd, 0xb}], 0x10, 0x2}, 0x90) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r10}, 0x18) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4}, 0x8) (async) r11 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x80) write$ppp(r11, &(0x7f0000000140)="8c", 0xffffffe4) 18:28:40 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffffffe4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001640)={{r0}, r1, 0x0, @inherit={0x50, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, @name="ac28fd46854d76392fee81d8e7d6ada4b79a29e20f7d652e1a1a615d2ab31c23b61806cf1b000a5f76df5692617a07aa5ae5f293cffc0f95cf2585cb69c0bfaf45032b970ca2a5fce45592236e016373d1d4a6487e0f6a73e23b5ce79494e1a1a5894107a9fddafb0706e7322eb5aec08de576725b08ed9898dab6c0462f8062582d4e7fbcf49c029e907561d16ba86696727edd92b77ac8e676c0b7bbfb2bb876847f515a525141a269259abc42d605fe90806ddbb2c8b7e21037e3fecb4eda4f429f943d7cf2ecf815814e4b97dea341552d3bec3ea296ddbcda49bf30e9b1afb023087a5a71297e9dcdf7f22fcbe7e14ee74fdbc491b02980cfb721e4e280ab9b78f89521eb8943a748d80a7764ef35f7c3b229a48471dcbfcd73bb4dde4d0eb18b278b949c9f7d25a26885388289299adebb191bebcf05d6295e407acee00243b1c056b675cd4d9dc13afa061dcbe40d325c3e1f859525ef230899c9f4b880b221773718a179144c1640eb0402b3a5588ef71636a63ffb60a3323e30b0939e0e1988ab730501fd2e0cc0f6c5ee9f13a51822505ab60a47ee8c78e1a7d2c866ecf0f2cdf195c3ef14ba25308a449c339b81b70fc692cd1c664e2e2508c83b203352d107292e63875d4fe69912ea47c2c4e14c18cd5f7c5e307b0762bfe858609b1cf77217252e8d2276847a15a19dd33b62a944eb9a077a9971893c818536513f8940df5f94c187ff01d380226504fd092d7725fba926b2f25aafe83377ccafaeac84708af73643ccb792c2becad9ac8c8a7c6c7d511bad2dc10efc19d00c2900075c29e354b60dbe31a08b23fc98e4f58a120c32eafde7efa05ff485facaf4e253b7aab559b483a6c80bdf466eab52a99431f49d46bb9476a940f40827b8ccac28aaf721951d1f51f304ac45da0b7890a2e984bb09d42682fa7681b57434a33e3c25c4f5569b60da11fa79441aa39d0c346e01386578fe4cfc4eb9112ce92574a32ab4e9c19ad403997de4d3c8562196a6aedaf5c2c63d3d1e96151975427411439e40b4cffd0cd4924d730b257fcbde78aeaeecdf0ba44dda317fa6ce1821528dbdfc952c3c70a0332ecb128683c7d2ad65f3a71676d1bee2009fcffdb5479d9e6af418e7a13c3441a646c6d7b822dcea99c31220d5f31d1576c2ab70798acf9405d7dea7cfb87b25b33ec801b25b1150e221bb937e37dc7652856ea4a8345ded1f33f7bb2ea42fc8aad759742fc1b7947c5c2e26367451198459bd947c5dded11fc5903dc4e137df2e7976915152aa6741c5e3f09bf448b0337f7b26dd4f2a51f8a0f9885672e7bdf47d9e815941d59b7b454a8a7c8a84e2abc36dfc9b55be846c86a2b17ac5158ce753bbc5d242b46bba615b29bdfb7835d7ad956667653a1f5121dff6bff54afe145b04b989e78c3393f9f7bf17eb984d73f445d38c6bbcd046a044b0ce205f720abcc34201b3a20a9c838e6348a3becf5936944ea7b619a4b48e210b9ed321a47b128a16bf7928e9b737539546d2b73ca3662e1f37543ed45cb0e840aef86aa28f8c644944b5ec78d9f071e521692a046135c3ff53f2e5513041b57c1a7d38b0f675eb73a1b261d5131bdc1e6e20fedeb0de4f2524de6e3c050754656a022ce3dc4323974008e75a3e9d17acebf1a245db484a83bb515a0791241a99fd5925e93b577b140bd2da3c5d2a8bf76f451247b27a7768753b958c45309efe0d22538fc2f132194f44eaef7809cd5e46f06e5580f07b74917e6a5e63dbf679480eee7ce21d88a0def80724a30c2ab41c41efc080c9d0395cc824b2f8884f921ff1fd92c6b80ee970999f2ad17f05bdaf1a1cae2c1be9ad687657cdbf854529384c3c3cb32cffeb6f3d5dc77eaa50e748dbf1b7ba9588cc8ad1bdc72a6b0750a21b6404afae8cadeb15cded82498ff4e5fbd29c21365a7c6b9642a9746f1cad55c29d58d073bc46c6259f4a45d7582b4ed95f3850c572a0ba3f50ccc92c037e5aa261a52577b5084801c908ff172729598818a2a687b39d21109ded321c44e76566165684a449fcdecca23d284db898d0d9cf776eaafc234869bffa7055e6b99b9f0ebd1f0befa72a2dd012e97457d5735e3cd7e88086ae762d1609b50946923f7dd09dcff781ccc73ce6ac2446cb916d90bf22fc5d4465f0094affc59d95802604ffe43d1e4a2a7b3163a0f74212cc1da4d3a85633b5aa3e2f1d0bb174317f82c4a70401e7e1bbef1ce2112e1aaf0224b08114e949936650aa5daee85ea00fdc92da0513bf4e12b4170451c0212a1e3c3b68d8f8f5821819a7e5148dc6f95e14446edd58e4785b300ea1df2c03d265511491f68f64c163fddfca54d866e3f6ff707ddb4bdadc321ae32807031cc14a5012df050b5497ec5c86d525b8e858d522c32aa82e0ad0f8520d8977dda3026650906b788b47a39deec31ed27fddcad315098ac6ec5a1d9ed6aa3ed2154d7454d99a7ebf9c6e3113869969d6193ddac2d89f42181b0c17c7b75e8854a7ccb63184e1c3ace6197b3d1e214378d13fe0c8ea9279fb7a78714f37ca46a82a509405c6394bb25eb587bf6610bea8d1954120ee7134969a884d04ee281f96157fd27770f11a27f47c5c72395a7b45ed2593f711132d643272ea725f58ce01bb1313bd51cc535acfe4f8abdad9c9fcd910b34a0f3ace2f9007def2b1b9d2b7939284a97831f29af94291e1d287db6065712d0bb18d5045238e4f30a15aa748fe294d2bd2f0283870d4a66603d7aa52730a6d6465b4168eb3970282022973576e48dc3ed1f55f4cde89863b8e95b6fee6f9515828ede93beb478d6ac28e0d63aad70919ac7541da8c5ffad7dd277607ff18cbcef73b3fa436527679144fa269ed4167334af042e8a0cfa938d7554bba71ebb41b989b37475030165a0ac05f6cc589d7b1a2ba0ae8a5769cbab9f7c4b6fd100930a4d4f76bbd4d5cb2ec3723a81d286bb47f2b481d162137c3320432d49f5b1111f4408ee91f764823ae2006a08cb9b60188d03629c276d8da7baa57939e50943ac151b09179190e73dd3d79c03fecdcd1efe3e3246245b11d22cfc4832bc412066d1f35f482dafd81fdb4990a7a147451bb33a23a8eb6f59fdafe0990a79e382abeacf63bf8bfe65b7e07296b739e29aa9fce8d0f8436b01b29e83d001e68a6f0823fd2b83057e4b6493075e301b85fa26cb9e4789facab8b4a8ce2e6c98dcd08892a508db4689115ba052f7a23c0621be1d6404bf8cd3fd300ea745a5146178af6759871f271c7fc4661cc295d735204ac0313c38ef4cd041d2893de49905dedba2c80f742c2147265f7cad9037264e3ca239494d9ef60e24c560d3de5f7eb4354c14463292ee9ee22ba59d9a1558d96f3b7ec75039bb46745f298d7df6c81a19302cbb0a134c60fa4c15282e433555a730d030e4601d975849ce64a56800dcb4223797eadaf4aa0464165da03fe3b83f788472a70de4c37db79fa872f0e0b8565e997d5ad782855f8a9ffc5a3ba5b8af61206c51ff06bc0344704027b27e939e46dfd1d17632962d4fc9fd093a2111f2275daccfac238b73e2590da552ec41030bdfe0706efdd4de6f1d5e10f17b99ff8b163c1615acf95ed6558a2859024c7d0f765f4e3fa5041fc7341e2a32e84e87f56c177fa79ac5692fd5fb222afcb7af2953efe0b1c5e90932b8c3db552a90963fc060c563d9af199dbfec9f1cf405b1e0ac7cae650697531eec0fb7e4d2a353396a9e433d366c1446e74cac5557125312bfe3da519f5be28a45e5e61b61e245c9dea71263dee7f0769785092ed64fa2f6b78c15ba2b3c6aca7440473c1358cf78b4090a0e4737ca57915053615102fc3867167a1b902fb57e2198640e61094559b135a4b8552a4ff4f3d9e1637f41ddca7a37fdf2d6448fead0843ef58f8d81cc8926063c8814b319980cb95a6a97e3f576a5da6f844366bd8300beec9807f44d2f88dbefc8fb74bf0817d804842784cefed5b8048b64d9d16d0cc40ae3ac3965d07e92a93167a293a74604b4a1e0728520ef2cedf30f68607e1606b82513834d70ddeabb6a7a81d751256cb835a3334b389ba74e85355f7c856218a53ea21325f55c0982523695fa649124195d721abcc089c55facfad221097d23d185a1d2944ee8c31721e13e7bb82a8eebfa4d851dc952d333baf5377d1427bc2f7d12e1ec3ff52b0bc85ff1dbae42afb5e04894d3bef6abe89d39636fe52b65ac3ab04e6b0fc7402552047eef0baf8f2c287a396214bb48e1295f76651d121d26b92682adfb5ea80b9a3e8e5e5f85ec3fd243bfb96473f10ad69c78c967383cad029a1068782da3bf32f1faf655f5f19fa4ee669dca7a605e65187614bb52537dcd3398a52b50c4ceb08ea95a1194cf32ae71f31947b1e4d53f6ea76c90b08035c6a407c031e08b506966e1c16e2368f309381f633de14cd88038e9af357226e842353e49775eb15447d40ba4f6adbb2ae1bbb19975339bbe86620dda188ec40c57e57776d430215025061aa81c3ba8109924db36742faa98f03b13e73f938fb97c807d557e9eb6bce2d482f759b344a0353f038e68ee6a21932b7eeddb5637826943720f720223d254a1704abc8180ccce9dc2fe4eda18ef71348eb4d4e1caf10e6e441819272f27c929d60dea1640e3666c2d4a2a1118d347f4f9029e96b20f8891bc63c26e724842a0e40a29ca999daffed2878ee23933eef8702c9eb9f46298fa4817c36f32b588b50d79eeacb5d2bf9afe02ed2943ab03407989ee509a5ec0204e8c3f4dee7ce9f2783f695a0aeacdaa998e660c401f93d01474c21d10010afd754eec09c105c404f7e1b70d76ab0fc7043d2f3f533cb921a568b1bab89ec72b21821807ecdd163905b5102d3375fcca7a9855f12e145f9d6698be22f3cd242c724c045eeb05038202751c9c4bc56cafdbb5f125ed4bf232510859725883525854f8ea6270bc683915d37f0f7f94f473f042893751c0dd26c289c7e063066ea12201e711f14ac0afa046ef63cdb54e937c0d7afc6aea2d0096ea35a645be0658486d4f452ce12349d097554e4c92482d756b5a7e570f71a600c9359f66d44dee69d24edf178b485dd77bcc1de61cecd25c6cd31c406c150f1a2a8bfbc37ef94238f9618534edd9919ec91fda906c927fe9a2f03058c50962bbef77a5f71d84ee1301bc19cb83019ec67a6ac3bcb4ff619b3fc94c68362e4a29a3341a7b33ee986c3f8de3fe13cb627bc70d70fd5710ca446943fcdd1c3bbd95a675a0530a1a049aac78e141878b415ec4bc2715fd05438fb03d51376b4dfd2137e733748e0aaaf94304a27a252ffdd747b6049d4a4f03e1ca2c7611072e76033e62430bc77a6beac472ba8786c6f7dedeb56ff10c3b39d7a63181aaf175d496dfda7f1d4a45cbe8faac21b94dbebff7f0ad8a467afd09d6a15ba976c00c9227abfd8cc0a5e5ca2ce76d7e50abb0f1f0cd5ab65c357210ecb8bc57be98bfd712ac5d871ef48b20fa758402340985eb1cf440dcef39db268c630a7a688ce2d2943d5fc1da28fe4ee3bc1162789b65ed6ce5aa1133a71c576591f3e55daa7b71bb55346f2655bf37895e9efc01f0eb2bb4084ff9ed3adedc9b5958d18ef15434fc5a2797dfcd775f4673b72269b70eb3fd0ef0809b20a4b38300a8c8f0d5679fb610e1cc2820fa7a827bca0e670b7045dee8355dde84550ed81"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000640)={{r0}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, @subvolid=0xffffffffffffffff}) 18:28:40 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff80a7) 18:28:40 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) 18:28:41 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8007) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="01000000010000f418000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)=ANY=[@ANYBLOB="01000000010000f418000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r8, 0xffffffffffffffff, r9, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0xfffffffd, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x5, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0xfffffffd, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x5, 0xc, 0xc}], 0x10, 0x4}, 0x90) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x4, 0x10}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="00000000000000afdadc7404b8f95700ec102368f8f35fb73e0000008068473d000000003189ccfab7b8eae815d4023b1c6de4a39c193c9e5eedf394d2d94649b805b71e5c21595d7c5bb93e0f931a5d5df699896b9e45d99e82564ec5f5e9c4df194e55f0106cfb410ccc15da6d98256d53ef73cdd0a2d0aad810a660eaaa1dc190cd434f080d119e42bda6f43e66109e91e25221862f485628917e656bf5845abc44cd583b1106a8fcb6029c2fb1849c9b46efff39ba7482ba6ad49432c425c6ec452ecf41577c80bdd3679ac993687287a9137df25b1b1f69800c994b0ea5ff3fcbf7276c053fa30139bb51"]) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r13}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r14, r15, 0xffffffffffffffff, r16, r12, 0xffffffffffffffff, r13, r11, r13], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0xa, 0x6}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xa}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r18 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/dev/char', 0x80400, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r17, r18, 0x3, 0x1, 0x1}, 0x48) linkat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) (async) linkat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 18:28:41 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x10c581, 0x0) write$ppp(r0, &(0x7f0000000140)="8c", 0xffff8067) 18:28:41 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async, rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/bdi', 0x101040, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25d, 0x0, 0x0, 0x0, 0x908b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[r7, r9, 0xffffffffffffffff, r8, r5, r1, r6, r4, r6], &(0x7f0000000e00)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x5}, {0x4, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x4, 0x6}], 0x10, 0x9}, 0x90) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresgid(0xee01, r10, 0x0) (async) getgroups(0x2, &(0x7f0000000080)=[0xee00, r10]) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x24, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @printk={@lli}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @kfunc, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r4, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0xa, 0xc}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 64) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) (rerun: 64) 18:28:41 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4981, 0x0) write$ppp(r0, &(0x7f00000000c0)="a5", 0xffff8024) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x981, 0x14) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000940)={0x9, 0x0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r2, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r2, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r6}, 0x18) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/bdi', 0x101040, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD